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AIR  SECURITY 
MAY  REQUIRE 
IT  OVERHAUL 

Mainframe  systems  would  struggle  to 

perform  functions  feds  are  considering 


BY  JENNIFER  DlSABATINO 

The  U.S.  Department  of  Trans¬ 
portation  is  considering  rec¬ 
ommendations  that  could  im¬ 
pact  performance  of  the  indus¬ 
try’s  aging  mainframe  systems 
and  require  a  costly  overhaul. 

Some  of  the  DOT’S  recom¬ 
mendations  call  for 
the  airlines’  IT  sys¬ 
tems  to  perform 
event-based  functions,  like 
red-flagging  a  suspected  ter¬ 
rorist’s  name  in  a  reservation 
system.  While  functions  like 
that  are  relatively  simple  pro¬ 
cedures  in  a  relational  data¬ 
base,  the  databases  used  by  ex¬ 
isting  airline  reservation  sys- 


One  year  later,  legal 
issues,  tech  stall  effort 


BY  JAIKUMAR  VIJAYAN 

Corporations  looking  to  imple¬ 
ment  electronic-signature  net¬ 
works  face  formidable  chal¬ 
lenges  related  to  technology 
and  process  standards,  con¬ 
sumer  protection  requirements 


terns  can’t  perform  them.  And 
adding  the  capability  to  screen 
passenger  names  could  cause 
bottlenecks  that  would  bring 
the  airlines’  networks  almost 
to  a  halt,  according  to  industry 
experts. 

American  Airlines  Inc., 
Delta  Air  Lines  Inc., 
United  Air  Lines  Inc., 
Southwest  Airlines 
Co.  and  Northwest  Airlines 
Inc.  all  declined  to  comment 
for  this  story,  saying  only  that 
they  wouldn’t  publicly  discuss 
anything  related  to  security. 

Secretary  of  Transportation 
Norman  Mineta’s  Rapid  Re¬ 
sponse  Team  on  Airport  Secu- 


and  conflicting  state  and  feder¬ 
al  regulations,  say  users  and  in¬ 
dustry  representatives. 

As  a  result,  one  year  after  the 
Electronic  Signatures  in  Global 
and  National  Commerce  Act 
went  into  effect,  use  of  e-signa¬ 
tures  for  e-commerce  is  well 
below  expectations,  they  said. 

“Adoption  by  industry  has 
E-Signatures,  page  12 


rity  issued  a  report  Oct.  1  that 
recommended,  among  other 
measures,  a  nationwide  pro¬ 
gram  of  voluntary  prescreen¬ 
ing  of  passengers. 

The  problem  is  that  main- 
frame-based  reservation  sys¬ 
tems  were  “never  designed  to 
respond  to  high-speed  auto¬ 
mated  relational  queries  dri¬ 
ven  by  hundreds  of  millions  of 
users,”  said  Richard  Eastman, 
president  of  The  Eastman 
Group  Inc.  in  Newport  Beach, 
Calif.,  in  a  soon-to-be  pub¬ 
lished  report. 

Forty  years  ago,  IBM  devel¬ 
oped  the  transactional  reserva¬ 
tion  databases  that  most  air¬ 
lines  still  use.  This  mainframe 
system  is  based  on  Transaction 
Processing  Facility,  which  con¬ 
stitutes  the  technology  under- 
Air  Security,  page  69 


ANTHRAX  THREAT 
EXPOSES  IT  ILLS 

Doctors:  Public  health 
infrastructure  isn’t  ready 


BY  BOB  BREWIN 

The  anthrax  crisis  has  exposed 
a  national  public  health  IT  in¬ 
frastructure  that’s  seriously  ill- 
prepared  to  deal  with  such  an 
emergency. 

In  fact,  that  infrastructure  is 
so  antiquated  that  the  Centers 
for  Disease  Control  and  Pre¬ 
vention  likened  it  to  a  “pony 
express”  system  that  relies  on 
paper-based  reports  and  phone 
calls  in  a  world  driven  by  the 
speed  of  the  Internet. 

Despite  years  of  warning 
about  the  possibility  of  bioter¬ 
rorism,  when  the  first  incident 
was  reported  on  Oct.  4,  only 
half  of  the  country’s  59  state 
and  territorial  health  depart¬ 
ments  and  6,000  state  and  local 
health  departments  and  boards 
had  full-time  Internet  connec- 
Anthrax,  page  14 
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E-SIGNATURES  SLOW  TO  GAIN  GROUND 


Don’t  expect  to  be  awash  in  technology 

training  in  a  techno-MBA  program.  Even  in  a 
school  where  technology  is  stressed, 
the  focus  is  on  providmg  the  0^v  \ 

tools  to  drive  strategic  thoughts  0  4ttl  •« 
to  manage  a  business,”  says  Pur- 
due’s  Chuck  Johnson  (above).  TEsurveyBA 


■o. 

* 


Story  begins  on  page  26. 


INTRODUCING  THE  FASTEST  STORAGE  SOFTWARE  ON  EARTH. 


BrightStor™  Enterprise  Backup 

What  good  is  storage  software  if  it  isn't  fast  enough  to  back  up  all  of  your  critical  information? 
BrightStor  Enterprise  Backup  sets  a  new  standard  for  high-speed  storage  software,  which  means 
you  don't  have  to  pick  and  choose  what  data  to  protect.  So  if  you're  looking  for  the  best  storage 
solution  for  UNIX,  Windows  NT,  and  Windows  2000,  you  just  found  it. 

HELLO  TOMORROW  I  WE  ARE  COMPUTER  ASSOCIATES  I  THE  SOFTWARE  THAT  MANAGES  eBUSINESS  " 


Computer  Associates™ 

ca.com/brightstor 


©2001  Computer  Associates  International,  Inc.  (CA).  All  trademarks,  trade  names,  service  marks,  and  logos  referenced  herein  belong  to  their  respective  companies. 


WAITING  FOR  A  MEETING  TO  TALK  ABOUT  A  MEETING 

PERFECT  TIME  TO  CHECK  YOUR  SHIPMENTS 


CHAIN  YOURSELF  TO  THE  NETWORK.  NOT  YOUR  DESK. 

PRESENTING  WIRELESS  MOBILITY  FROM  COMPAQ. 

Compaq  complete  mobility  solutions  allow  your  employees  to  do  their  work.  Even  when  they’re  not  at 
their  desk. The  new  Compaq  Evo™  Notebook  N600c  comes  with  a  Mobile  Intel®  Pentium®  III  processor 
and  an  innovative  MultiPort  for  wireless  networking  capability!*  This  means  your  team  can  access  real 
information  in  real  time.  So  now  they  can  check  current  inventory,  track  sales  or  send  e-mail  from  the 
conference  room  or  the  cafeteria.  And  if  they  want  something  even  smaller,  give  them  the  iPAQ 
Pocket  PC  for  PC  functionality  that  fits  in  the  palm  of  their  hands. 

Compaq  Evo™  notebooks  start  at  $999** 


INNOVATIVE  PRODUCTS, 
INTEGRATED  INTO  SOLUTIONS  & 
DELIVERED  GLOBALLY 


]find  the  wireless  solution 

you  need  at  compaq.com/mobile 
or  call  1-800-888-6046 


Compaq  PCs  use  genuine  Microsoft®  Windows® 
www.microsoft.com/piracy/howtotell 

‘Wireless  LAN  provided  either  through  MultiPort  or  PC  card.  Wireless  WAN  provided  through  PC  WAN  card;  wireless  air  time  contract  required.  802.11  functionality  (in  a  MultiPort  module)  is  sold  separately.  PC  cards  sold  separately.  Subject  to  wireless  network 
coverage.  “Suggested  retail  price.  Compaq,  the  Compaq  logo,  Evo,  iPAQ  and  Inspiration  Technology  are  trademarks  of  Compaq  Information  Technologies,  LP.  in  the  U.S.  and  other  countries.  Intel,  the  Intel  Inside  logo  and  Pentium  are  trademarks  or  registered 
trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other  countries.  Products  and  company  names  mentioned  herein  may  be  trademarks  or  registered  trademarks  of  other  companies.  ©2001  Compaq  Computer  Corporation. 
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WHERE  MUSLIM  WORKERS 
HND  HAVEN  FOR  RESPECT 

Some  Muslim  Americans,  like  the  people 
shown  here  arriving  for  Friday  services 
at  a  Paterson,  N.J.,  mosque  last  month, 
have  needed  protection  from  attack.  But 
many  Muslim  IT  workers  say  they  are 
doing  well  in  the  workplace,  where  co¬ 
workers  have  rallied  around  them  with 
shows  of  support  and  respect.  PAGE  34 


SYMBIOTIC  INTELLIGENCE 

The  Internet’s  unique  ability  to  foster 
human  interaction  may  prove  to  be  a 
hidden  catalyst  for  solving  some  of 
society’s  toughest  problems,  say  experts 
like  Norman  Johnson  (at  left)  of  Los 
Alamos  National  Laboratory.  PAGE  54 
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6  Microsoft  puts  part  of  the  blame 
for  its  security  woes  on  those  who 
publicize  the  vulnerabilities. 

7  Budget-conscious  it  shops 

take  a  closer  look  at  new  develop¬ 
ment  methods,  such  as  extreme 
programming. 

8  The  U.S.  Customs  Service  says 

American  businesses  need  to  beef 
up  their  IT  security  and  logistics 
systems  in  order  to  secure  the 
nation’s  borders. 

9  Congress  WOOS  corporate  back¬ 
ing  for  planned  privacy  legislation 
by  offering  federal  preemption  of 
any  state  privacy  laws. 

10  Users  turn  to  Web  services  as 
a  way  to  democratize  enterprise 
application  integration. 


For  breaking  news,  updated 
twice  daily  at  noon  and 
5  p.m.,  visit  the  Computer- 
world.com  Web  site: 

www.computerworld.com/q?q4000 


XP  NEWS 

Read  the  latest  Computerworld 
coverage  of  Windows  XP  and  hear 
what  others  have  to  say. 

www.computerworld.com/q7a1140 
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25  Joe  Auer  tells  of  how  a  vendor 
used  a  “corporate  jet”  ploy  to  rush 
a  customer  into  prematurely  sign¬ 
ing  what  amounted  to  a  contract. 
But  the  scheme  didn’t  fly. 
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ADOPT  EARLY 
AND  GET  AN  EDGE 

Frost  &  Sullivan  analyst  Wai  Sing 
Lee  explains  how  businesses  can 
get  an  edge  over  rivals  by  being 
among  the  first  to  use  new  wireless 
technologies. 

www.computerworld.com/wireless 


TECHNOLOGY  49 

49  Getting  IIS  free  with  Windows 

obviously  doesn’t  mean  it  won’t 
cost  you  in  the  long  run,  says 
columnist  Nicholas  Petreley. 

50  With  Windows  XP,  Micro¬ 
soft  may  finally  be  getting  serious 
about  security  —  but  is  it  enough? 

52  Support  for  Session  Initia¬ 
tion  Protocol  has  been  included  in 
Windows  XP,  the  biggest  step  yet 
toward  acceptance  of  the  real-time 
communications  standard. 

56  QuickStudy:  Knowledge  man¬ 
agement  is  the  art  of  collecting 
organizational  data  and  turning  it 
into  usable,  accessible  information. 
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teria’s  e-business  tools  ease  supply 
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BE  SURE  THE  VENDOR 
KNOWS  ITS  STUFF 

Privacy  consultant  A.G.  Breiten- 
stein  says  companies  must  be  sure 
vendors  know  what  they’re  doing 
before  buying  applications  to  bring 
IT  operations  into  compliance 
with  the  Health  Insurance  Porta¬ 
bility  and  Accountability  Act’s  data 
privacy  regulations. 
www.computerworld.com/security 
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22  Maryfran  Johnson  says  data 

storage  is  a  big  issue  that  IT  man¬ 
agers  should  immerse  themselves 
in  today.  Just  don’t  bring  it  up  with 
the  CEO. 

22  Pimm  Fox  writes  that  it 

can  get  a  big  boost  if  Washington 
accelerates  the  depreciation  sched¬ 
ule  for  computer  equipment. 

23  Michael  Gartenberg  outlines 

a  few  reasons  why  ubiquitous 
computing  will  supplant  the  PC 
from  its  dominant  position. 

70  Frank  Hayes  says  Sun’s  pro¬ 
gram  of  making  and  delivering 
“ready  to  use”  systems  can  help 
time-  and  resource-starved  IT 
shops.  But  is  that  too  revolutionary 
for  users  who  like  to  install  things 
themselves? 
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EARNINGS  ROUNDUP 

For  the  latest  coverage  of  IT  indus¬ 
try  quarterly  results,  visit  our  earn¬ 
ings  news  page. 

www.computerworld.com/q7a1150 
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IBM  Upgrades  VOS 
For  Mainframes 


IBM  introduced  an  upgrade  of  its 
z/OS  mainframe  operating  system 
with  new  resource-sharing  and 
security  features.  The  z/OS  VI  R2.0 
release  includes  an  intrusion-detec¬ 
tion  tool  that  scans  incoming  data 
for  security  threats,  IBM  said,  the 
upgrade  also  lets  users  running 
Linux  and  z/VM  applications  use 
tools  that  can  reallocate  system 
resources. 

Sun  Delays  Server 
Reconfiguration  Tool 

Sun  Microsystems  Inc.  is  delaying 
the  release  of  a  key  software  fea¬ 
ture  for  its  Sun  Fire  midrange  Unix 
servers.  The  dynamic  reconfigura¬ 
tion  tool  was  described  as  a  stan¬ 
dard  feature  when  the  servers  were 
announced  earlier  this  year.  Sun 
said  it  expects  the  tool  to  be  avail¬ 
able  in  next  year’s  first  quarter. 

Charities  Warn  of 
Fake  Donation  Vims 

Several  relief  agencies  warned  of 
a  computer  virus,  dubbed  Septer. 
Trojan,  that  disguises  itself  as  an 
e-mail  message  requesting  dona¬ 
tions.  The  message  contains  an 
executable  file  that  uploads  data 
entered  on  a  fake  donation  request 
form  to  a  Web  site  that’s  not  affiliat¬ 
ed  with  the  agencies,  which  include 
The  American  National  Red  Cross, 
United  Way  of  America  and  The 
September  11th  Fund. 


Short  Takes 

Atlanta-based  BELLSOUTH  CORP. 
said  it  plans  to  lay  off  3,000  employ¬ 
ees  after  posting  a  third-quarter 
profit  of  $7  million,  down  from  SI  bil¬ 
lion  in  the  same  period  last  year. . . . 
A  Belgian  court  rejected  a  financial 
restructuring  plan  filed  by  LERNOUT 
&  HAUSPIE  SPEECH  PRODUCTS  NV 
and  lifted  the  leper,  Belgium-based 
software  vendor’s  bankruptcy  pro¬ 
tection  in  that  country. 
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Microsoft:  Loose  lips 
Give  Hackers  Tips 


Vendor  aims  to  curb  vulnerability  notices; 
users  say:  Just  make  better  software 


BY  JAIKUMAR  VIJAYAN 

icrosoft  an¬ 
nounced  last 
week  a  new 
system  for  rat¬ 
ing  the  sever¬ 
ity  of  security  holes  in  its  soft¬ 
ware.  But  it  also  urged  the 
security  community  to  exer¬ 
cise  better  judgment  about 
publicizing  software  vulnera¬ 
bilities  and  detailing  how  they 
can  be  exploited. 

The  practice  of  publishing 
explicit,  step-by-step  instruc¬ 
tions  for  exploiting  vulnerabil¬ 
ities  contributed  to  the  damage 
that  was  inflicted  on  users  of 
Windows-based  systems  by  re¬ 
cent  worms  such  as  Code  Red 
and  Nimda,  said  Scott  Culp, 
manager  of  Microsoft’s  Securi¬ 
ty  Response  Center. 

But  several  users  said  that 


while  Microsoft  had  raised  a 
valid  and  long-standing  issue, 
the  company  itself  is  to  blame 
for  many  of  the  security  prob¬ 
lems  affecting  its  software. 

“The  problems  are  most 
certainly  not  caused  by  full 
disclosure.  They’re  caused  by 
bad  coding  practices,”  said 
Josh  Turiel,  network  services 
manager  at  Holyoke  Mutual 
Insurance  Co.  in  Salem,  Mass. 

Information  Anarchy’ 

In  a  note  published  on  Mi¬ 
crosoft  Corp.’s  Web  site  last 
week,  Culp  lashed  out  at  the 
“information  anarchy”  that 
“allows  even  relative  novices 
to  build  highly  destructive 
‘malware’  ”  using  published  in¬ 
formation  about  vulnerability 
exploits. 

People  who  make  such  infor¬ 


Danger  Signs 

Microsoft  said  it  will  use  the  following  guidelines  to  rate  the 
potential  threat  of  security  holes  found  in  its  software: 

m  CRITICAL  MODERATE  ■  LOW 

Internet  Server 

■  Allows  Web  site  defacement,  denial  of  service  or  full 
control  of  systems. 

Difficult  to  exploit,  requires  an  unusual  configuration  or 
has  a  temporary  effect. 

■  Likely  to  have  a  limited  impact,  such  as  disclosure  of 
scripts. 

Internal  Server 

■  Enables  the  elevation  of  user  privileges  and  data  thefts  or 
modifications  that  are  hard  to  audit. 

Allows  auditable  data  disclosures,  modifications  or 
denial  of  service. 

■  Supports  limited  denial  of  service  and  untargeted  or 
fragmentary  thefts  of  data. 

Client  System 

■  Runs  arbitrary  code  without  user  action;  supports  remote 
escalation  of  privileges. 

Exploits  user  actions;  allows  local  escalation  of  privileges. 

■  Targets  limited  or  fragmentary  data  thefts  and  modifica¬ 
tions  plus  Web  site  attacks. 


mation  available  have  argued 
that  it  can  help  systems  admin¬ 
istrators  figure  out  how  to  pro¬ 
tect  their  systems.  But  Culp 
said  in  an  interview  that  Mi¬ 
crosoft’s  investigations  of 
worms  such  as  Nimda,  Code 
Red  and  Sadmind  clearly 
showed  that  those  worms  used 
exploit  techniques  similar  to 
ones  that  had  been  detailed 
publicly  —  in  some  cases,  they 
employed  even  the  same  file 
names  and  exploit  code. 

As  a  result,  it’s  better  to  tell 
users  only  what  systems  are 
affected,  how  they’re  affected 
and  what  can  be  done  to  plug 
the  holes,  Culp  said.  For  exam¬ 
ple,  Microsoft  said  its  new 
severity  rating  system  is  meant 
to  give  users  a  better  idea  of 
the  risks  posed  by  different 
vulnerabilities  (see  box). 

Leaving  specific  examples  of 
exploit  code  out  of  vulnerabili¬ 
ty  information  is  generally  a 
good  idea,  Turiel  agreed.  But, 
he  added,  “the  danger,  as  I  see 
it,  is  that  if  someone  discovers 
a  flaw  and  it’s  not  repaired  or 
disclosed  to  the  public,  how 
do  we  defend  against  people 
who  know  about  it?” 

David  Lelievre,  a  project 
manager  at  Tweddle  Informa¬ 
tion  Services  Inc.,  an  applica¬ 
tion  service  provider  in  Clin¬ 
ton  Township,  Mich.,  said  the 
notion  that  “a  systems  admin¬ 
istrator  should  bury  his  head 
in  the  sand  and  install  patches 
without  knowing  what  they 
are  going  to  actually  do  to  the 
system  is  ridiculous.”  A  mere 
lack  of  published  information 
is  “not  going  to  prevent  the 
next  wonder  kid  from  writing 
a  virus,”  he  added. 

With  that  in  mind,  Micro¬ 
soft  should  focus  on  fixing  the 
vulnerabilities  in  its  software, 
not  on  criticizing  those  who 
publicize  exploit  information, 
said  David  Krauthamer,  MIS 
manager  at  Advanced  Fibre 
Communications  Inc.,  a  maker 
of  telecommunications  equip¬ 
ment  in  Petaluma,  Calif. 


However,  Daniel  McCall,  an 
analyst  at  Waltham,  Mass.- 
based  security  consultancy 
Guardent  Inc.,  said  Microsoft 
does  have  a  point. 

“Our  view  is,  don’t  tell  peo¬ 
ple  how  to  break  a  system,” 
McCall  said.  A  far  better  ap¬ 
proach  would  be  to  release 
vulnerability  information  only 
after  a  fix  has  been  developed, 
he  said.  Guardent’s  policy  is  to 
inform  vendors  and  other  rele¬ 
vant  parties  when  holes  are 
discovered  and  then  wait  until 
patches  are  available  before 
publicizing  the  flaws.  I 


Link© 


Read  what  others  are 
saying  about  Micro¬ 
soft  and  security  in 
our  user  forums. 


www.computerworld.com/q?a1170 


New  Rating 
System  Gets 
Fast  Workout 

Microsoft  got  a  chance  to  use 
its  new  vulnerability  severity 
rating  system  almost  as  soon 
as  it  was  put  in  place.  But  the 
process  was  temporarily 
marred  by  a  faulty  patch. 

Last  week,  Microsoft  warned 
users  of  a  moderate  risk  vulner¬ 
ability  affecting  terminal  servers 
using  Windows  NT  4.0  or 
Windows  2000  on  corporate 
intranets.  For  deployments  on 
external  Web  servers,  the  risk  is 
low,  the  company  said. 

The  denial-of-service  vulner¬ 
ability  affects  the  Remote  Data 
Protocol  implementation  that’s 
included  with  the  terminal  ser¬ 
vice  in  the  two  operating  sys¬ 
tems,  according  to  a  security 
bulletin  on  Microsoft’s  Web  site. 

Rebooting  a  server  that  has 
failed  because  of  the  vulnera¬ 
bility  will  restore  the  system, 
but  any  work  in  progress  at  the 
time  of  the  attack  would  be 
lost.  Microsoft  said.  It  recom¬ 
mended  that  users  install  a 
patch  meant  to  plug  the  hole. 

But  more  than  30  users 
reported  that  the  patch  itself 
caused  system  problems, 
according  to  the  NTBugTraq 
mailing  list.  Microsoft  pulled 
the  patch  from  its  Web  site  and 
said  a  new  version  would  be 
released  “shortly.” 

-  Jaikumar  Vijayan 


COMPUTERWORLD  October  22, 2001 


Developers  Approach  Extreme  Programming  With  Caution 


Users  say  corporations  are  adopting 

only  select  aspects  of  the  methodology 


Getting  Extreme 

IT  departments  are  taking  a  closer  look  at  new  development 
methods,  such  as  extreme  programming  and  agile  modeling. 

Extreme  programming  advocates  12  core 
development  practices,  including: 

►Application  development  teams  put  small  code  releases 
into  production  early 

►Pair  programming:  Two  developers  work  side-by-side 

►  On-site  customer  required  to  aid  in  project  development 

►All  programmers  given  collective  ownership  of  code 
and  the  ability  to  change  it 

Agile  modeling  includes  general  concepts,  such  as: 

►Creating  simple  content 

►Testing  code  often 
►Using  several  design  models 


BY  LEE  COPELAND 

TAMPA.  FLA. 

As  corporations  struggle  to 
complete  application  develop¬ 
ment  projects  on  time,  within 
budget  and  without  lots  of 
buggy  code,  they’re  taking  a 
closer  look  at  new  develop¬ 
ment  methods,  such  as  ex¬ 
treme  programming. 

While  interest  is  growing 
within  the  ranks,  attendees  at 
the  Object-Oriented  Program¬ 
ming,  Systems,  Languages  and 
Applications  2001  conference 
here  said  most  companies  are 
taking  a  piecemeal  approach  to 
using  developer-driven  tech¬ 
niques,  such  as  extreme  pro¬ 
gramming  and  agile  modeling, 
instead  of  implementing  them 
entirely. 

Programmer  Kent  Beck  de¬ 
veloped  the  extreme  program¬ 
ming  methodology  five  years 
ago  while  serving  as  the  proj¬ 
ect  leader  on  Chrysler  Com¬ 
prehensive  Compensation,  a 
long-term  project  to  rewrite 
Chrysler  Corp.’s  payroll  appli¬ 
cation. 

Today,  Stuttgart,  Germany- 
based  DaimlerChrysler  AG 
still  uses  extreme  program¬ 
ming  within  several  applica¬ 
tion  development  groups  in 
the  U.S.  and  Germany,  said 
Christian  Wege,  portal  and 
Web  application  architect  at 
the  automaker. 

A  la  Carte  Approach 

But  Wege  said  Daimler¬ 
Chrysler  emphasized  just  a 
few  extreme  programming 
approaches,  such  as  unit  test¬ 
ing  and  conducting  frequent 
code  reviews.  Other  tenets, 
such  as  pair  programming, 
usually  aren’t  implemented 
because  most  development 
teams  are  dispersed  and  appli¬ 
cation  development  is  often 
outsourced,  according  to 
Wege. 

Still,  corporations  are  in¬ 
creasingly  turning  to  new  tech¬ 
niques  to  make  the  most  of 


smaller  development  teams 
and  to  contend  with  more 
complex,  distributed  applica¬ 
tions,  said  Chris  Dial,  an  ana¬ 
lyst  at  Cambridge,  Mass.-based 
Forrester  Research  Inc. 

“For  new  types  of  applica¬ 
tions  like  Web  services,  the  de¬ 
mand  for  well-structured  code 
increases,  and  it’s  not  possible 
to  cut  corners  on  design,”  said 
Dial. 

New  York-based  entertain¬ 
ment  channel  Noggin  LLC 
adhered  to  extreme  program¬ 
ming  techniques  when  it  re¬ 
cently  launched  an  interactive 
Web  site  that  ties  into  the  tap¬ 
ing  of  its  shows.  The  project 
was  managed  by  CodeFab  Inc., 
a  New  York-based  develop¬ 
ment  shop. 

“We  kept  breaking  [the  proj¬ 
ect]  down  into  many  smaller 
projects,”  said  Kenny  Miller, 


Aspect's  self-service 
software  supports 
use  of ‘voiceprints’ 

BY  MARC  L.  SONGINI 

Customer  relationship  man¬ 
agement  (CRM)  software  ven¬ 
dor  Aspect  Communications 
Corp.  last  week  added  voice- 
recognition  technology  to  a 
self-service  application  that 
lets  customers  process  trans¬ 
actions  by  telephone. 

San  Jose-based  Aspect  said 
the  self-service  software  can 
now  identify  customers  by 
their  “voiceprints,”  eliminating 
the  need  for  them  to  enter 
personal  identification  num¬ 
bers  (PIN)  or  other  passwords 
to  access  account  information 
or  pay  bills.  The  voice-recogni- 


vice  president  of  programming 
and  production  at  Noggin.  “My 
fear  was  that  the  project  would 
collapse  under  its  own  weight. 
[Extreme  programming]  al¬ 
lowed  us  to  make  incremental 
progress.” 

IT  managers  and  developers 


tion  technology,  developed  by 
Nuance  Communications  Inc. 
in  Menlo  Park,  Calif.,  is  includ¬ 
ed  in  Version  6.0  of  Aspect’s 
Customer  Self-Service  tool. 

Sheila  McGee-Smith,  a  CRM 
analyst  in  Pittstown,  N.J.,  said 
the  voice-recognition  feature 
wouldn’t  have  been  that  note¬ 
worthy  prior  to  the  Sept.  11 
terrorist  attacks  on  the  U.S. 
But  now,  banks  and  other  secu¬ 
rity-conscious  companies  may 
“take  a  closer  look  at  this  than 
they  might  have”  if  the  attacks 
hadn’t  occurred,  she  said. 

Not  Available  Elsewhere 

Large  CRM  players  such  as 
Siebel  Systems  Inc.  don’t  offer 
homegrown  voice-recognition 
capabilities  with  their  software 
at  this  point,  McGee-Smith 
said.  A  services  person  at  San 


are  less  certain  of  the  degree  to 
which  they  will  follow  each 
tenet  of  the  new  development 
methodologies. 

Motorola  Inc.,  for  example, 
has  used  parts  of  extreme  pro¬ 
gramming  in  some  of  its  devel¬ 
opment  organization  but  found 


Mateo,  Calif. -based  Siebel  con¬ 
firmed  that  its  voice-activated 
self-service  application  can’t 
authenticate  users  by  their 
voice  patterns. 

McGee-Smith  noted  that 
Dallas-based  InterVoice-Brite 
Inc.  does  support  voice  recog¬ 
nition  as  part  of  the  interactive 
voice  response  technology  it 
sells.  However,  Aspect  claimed 
that  it  also  provides  call  center, 
e-mail  and  other  CRM-related 
functions  with  its  software. 

Daniel  Reagan,  vice  presi¬ 
dent  of  technology  at  Min¬ 
neapolis-based  Navitaire  Inc., 
said  the  new  voice-recognition 
tool  could  make  self-service 
applications  easier  to  use.  “I 
think  [customers]  would  wel¬ 
come  a  system  where  you  use 
your  own  voice,”  he  said.  “Cer¬ 
tainly,  things  that  can’t  be 
stolen  are  beneficial.” 

Navitaire,  an  application  ser¬ 
vice  provider  that  has  contracts 
with  about  40  airlines,  uses  As¬ 
pect’s  applications  to  let  corpo¬ 
rate  users  do  things  such  as 
book  flights.  Currently,  Navi- 


Voice-Recognition  Abilities 
Added  to  New  CRM  System 
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that  it  wasn’t  useful  for  global 
development  projects,  said 
Ron  Crocker,  senior  technical 
architect  at  the  Schaumburg, 
Ill. -based  company.  “[Extreme 
programming]  values  small 
teams,  and  that’s  not  always 
possible,”  he  said. 

But  some  developers  say 
full-throttle  extreme  program¬ 
ming  will  drive  higher  quality 
and  more  rapid  application 
development. 

“The  problem  with  [extreme 
programming]  is  the  name,” 
said  James  Knox,  an  indepen¬ 
dent  development  consultant 
in  Ottawa.  “After  a  lot  of  man¬ 
agers  hear  the  name,  it’s  down¬ 
hill  from  there,  and  they  get 
turned  off,”  citing  the  word 
extreme  as  radical. 

Knox  said  “there  was  zero 
management  support”  for  ex¬ 
treme  programming  at  his 
previous  employer,  so  he 
struck  out  on  his  own  to  de¬ 
velop  projects  using  the 
methodology.  I 

|L.|r  Read  about  Capital 
LUv-JV  One's  experiences 
T  inVA  with  extreme 
U1  programming. 

www.computerworld.com/q724331 


taire  relies  on  PINs  and  other 
traditional  authentication  pro¬ 
cedures  to  verify  the  identities 
of  customers,  Reagan  said. 

He  added  that  he  hasn’t  in¬ 
vestigated  what  it  would  cost  to 
install  Aspect’s  new  software 
or  whether  Navitaire’s  IT  in¬ 
frastructure  would  have  to  be 
upgraded  to  support  the  voice- 
recognition  technology.  I 


AT  A  GLANCE 


Numbers 

Game 

In  addition  to  announcing  its 
self-service  product  last  week, 
Aspect  issued  updates  about  its 
financial  status: 

■  Reported  a  $25.7  million  third- 
quarter  loss  on  revenue  of  $108.7  million, 
down  from  year-earlier  sales  of  $148.5 
million. 

a  Said  it  expects  fourth-quarter 

revenue  to  be  flat  with  the  third-quarter 
level,  at  best. 

■  Announced  it  was  laying  off  about  350 

employees,  reducing  the  company’s  work¬ 
force  by  16%. 
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U.S.  Customs  Needs  Delivery 
Firms  to  Improve  IT  Security 

Better  logistics  systems  necessary  to 
protect  borders  following  Sept.  11  attacks 


BY  LINDA  ROSENCRANCE 

HE  U.S.  CUSTOMS 

Service  has  beefed 
up  its  technology 
in  the  wake  of  the 
Sept.  11  terrorist 
attacks  on  the  U.S.  But  without 
similar  investments  in  IT  secu¬ 
rity  and  logistics  systems  by 
American  businesses,  securing 
the  nation’s  borders  will  re¬ 
main  an  elusive  goal. 

“Efforts  to  improve  security 
at  the  border  entry  points  re¬ 
quire  that  parallel  security  ef¬ 
forts  be  undertaken  in  the  . . . 
transportation  and  logistics 
network,”  said  Stephen  Flynn, 
a  senior  fellow  with  the  Na¬ 
tional  Security  Studies  Pro¬ 
gram  at  the  Council  on  Foreign 
Relations  Inc.  in  New  York. 

During  an  average  year,  the 
Customs  Service  processes  10.8 
million  trucks,  5.3  million  ves¬ 
sel  cargo  containers,  1.9  million 
rail  cars  and  786,000  commer¬ 
cial  aircraft,  according  to  data 
from  the  agency.  Before  Sept. 
11,  the  Customs  Service  in¬ 
spected  3%  of  the  commercial 
shipments  coming  into  the  U.S. 

Time  Is  Precious 

Tighter  security  and  in¬ 
creased  inspections  have  re¬ 
sulted  in  hours-long  delays  for 
commercial  traffic  from  Mexi¬ 
co  and  Canada.  And  while  the 
country  remains  on  a  Level  1 
Alert,  businesses  are  worried 
about  losing  money  because 
goods  are  often  delayed  as  im¬ 
ports  are  being  more  heavily 
scrutinized,  said  Adrian  Gonza¬ 
lez,  an  analyst  at  ARC  Advisory 
Group  Inc.  in  Dedham,  Mass. 

Manufacturers  with  lean 
supply  chains  using  just-in- 
time  delivery  strategies  are 
most  affected,  he  said.  Even 
with  the  Customs  Service’s  in¬ 
creased  use  of  nonintrusive  in¬ 
spection  (Nil)  technology,  in¬ 
cluding  mobile  and  Fixed-site 


X-rays,  vehicle  gamma-ray 
imaging  systems,  portable  con¬ 
traband  detectors  and  vapor/ 
particle  detectors,  critical  in¬ 
ventories  are  held  up  during 
lengthy  border  inspections. 

John  Pennella,  executive  di¬ 
rector  of  applied  technology 
at  the  Customs  Service,  said 
the  agency  has  purchased  103 
Nil  systems  capable  of  scan¬ 
ning  containers  and  has  de¬ 
ployed  68  of  these  large-scale 
systems.  In  addition,  more 
than  200  smaller  X-ray  sys¬ 
tems  have  been  deployed  at 


30  top  executives  to 
serve  on  national 
advisory  council 


BY  DAN  VERTON 

WASHINGTON 

Even  as  the  fear  of  biological 
warfare  paralyzed  portions  of 
the  nation’s  capital  last  week,  a 
picture  of  renewed  coopera¬ 
tion  between  the  government 
and  industry  on  critical  infra¬ 
structure  protection  was  be¬ 
ginning  to  emerge. 

The  Bush  administration 
last  week  finalized  the  execu¬ 
tive  order  establishing  the 
President’s  Critical  Infrastruc¬ 
ture  Protection  (CIP)  Board 
under  Richard  Clarke,  the  na¬ 
tion’s  newly  appointed  cyber¬ 
security  czar. 

The  administration  had  ap¬ 
proved  the  order  in  draft  form 
at  least  four  months  ago. 

The  Finalized  order  clears  up 
many  of  the  questions  that  had 
emerged  about  the  future  of 


various  air,  land  and  seaport 
entries.  Pennella  said  his 
agency  is  working  with  ship¬ 
pers  to  identify  technology 
that  could  be  used  to  ensure 
their  shipments  aren’t  being 
used  to  transport  contraband. 

Flynn  said  shippers  and  car¬ 
riers  could  adapt  tracking 
technology  —  such  as  elec¬ 
tronic  tagging  and  universal 
bar  codes  —  to  provide  border 
control  agents  with  timely,  de¬ 
tailed  information  on  their  car¬ 
go.  This  in-transit  accountabil¬ 
ity  would  let  authorities  act  on 
intelligence  of  a  potential 
breach  in  security  before  ship¬ 
ments  arrive  at  the  borders. 
Nonsuspicious  cargo  could  be 
cleared  for  entry  without  delay 


various  federal  agencies  that 
have  a  stake  in  critical  infra¬ 
structure  protection  efforts,  in¬ 
cluding  cybersecurity.  For  ex¬ 
ample,  many  observers  had 
been  uncertain  about  the  fu¬ 
ture  roles  of  the  FBI’s  National 
Infrastructure  Protection  Cen¬ 
ter  (NIPC)  and  the  U.S.  Depart¬ 
ment  of  Commerce’s  Critical 
Infrastructure  Assurance  Of- 
Fice  (CIAO),  but  the  executive 
order  names  the  directors  of 
both  agencies  as  members  of 
the  board’s  coordinating  com¬ 


at  the  borders,  he  said. 

One  such  cargo  security  sys¬ 
tem,  SmartSeal,  developed  by 
Savi  Technology  Inc.  in  Sunny¬ 
vale,  Calif.,  is  being  eyed  by  the 
National  Association  of  Manu¬ 
facturers  (NAM)  in  Washing¬ 
ton  and  its  counterpart  in 
Canada  as  a  way  to  keep  trade 
flowing  while  ensuring  border 
security,  according  to  a  NAM 
spokesman. 

SmartSeal  is  already  being 
used  by  the  U.S.  Department  of 
Defense,  as  well  as  the  logistics 
arm  of  Hong  Kong-based 
Hutchison  Port  Holdings, 
which  said  the  product  saves 
the  company  about  four  hours 
at  border  crossings  between 
Hong  Kong  and  China.  The 


mittee,  effectively  ensuring  the 
agencies’  survival. 

The  NIPC,  based  at  FBI 
headquarters,  was  formed  in 
1998  to  handle  threat  assess¬ 
ment,  investigations  and  re¬ 
sponses  to  any  attacks  on  criti¬ 
cal  U.S.  infrastructures. 

Also  established  in  1998,  the 
CIAO  is  responsible  mainly  for 
integrating  various  private- 
sector  security  plans  into  a  sin¬ 
gle  national  plan,  known  as  the 
National  Plan  for  Information 
Systems  Protection. 

“We’re  a  member  of  the 
board,”  said  John  Tritak,  direc¬ 
tor  of  the  CIAO,  when  asked 
if  the  executive  order  had 
cleared  up  any  doubts  he  may 
have  had  about  his  agency’s  fu¬ 
ture.  “It  ensures  a  dedicated 


How  SmartSeal 
Works 

Real-time  data  is  collected 
through  a  specially  designed 
radio  frequency  ID  tag  that  is  used  to 
seal  and  secure  a  container  after  it 
has  been  packed  and  inspected. 

With  SmartSeal,  all  types  of 
cargo  containers  can  be 
packed,  inspected  and  sealed  at  the 
time  of  loading  and  continuously 
monitored  during  transport. 

Once  secured,  the  SmartSeal 
tag  electronically  detects  and 
reports  any  tampering,  enabling  con¬ 
tinuous  monitoring  of  the  shipment. 

The  container  can  then  be  iso¬ 
lated  and  inspected  or  prevent¬ 
ed  from  being  loaded  or  moved. 


SmartSeal,  which  is  attached  to 
a  container,  produces  an  alert 
if  anyone  tampers  with  the 
container.  I 


line  of  funding,”  he  added. 

The  order  also  formally  es¬ 
tablished  the  National  Infra¬ 
structure  Advisory  Council 
(NIAC),  a  30-member  panel  of 
private-sector  experts  that  will 
advise  the  president  on  the  se¬ 
curity  of  information  systems 
that  support  various  sectors  of 
the  economy,  such  as  banking 
and  finance,  transportation, 
manufacturing  and  energy.  In¬ 
dustry  CEOs  will  comprise  the 
bulk  of  the  NIAC,  which  is 
charged  with  enhancing  secu¬ 
rity  cooperation  between  pri¬ 
vate  companies  and  the  gov¬ 
ernment. 

Ronald  Dick,  director  of  the 
NIPC,  said  the  Bush  adminis¬ 
tration’s  executive  order  estab¬ 
lishing  the  CIP  Board  raises 
the  bar  on  accountability  in 
the  federal  sector  through  ex¬ 
plicit  language  that  holds  the 
heads  of  federal  agencies  re¬ 
sponsible  for  the  security  of 
their  IT  systems  and  networks. 

“That’s  an  important  step,” 
said  Dick.  “The  government  is 
hopefully  going  to  be  an  exam¬ 
ple  to  the  private  sector.”  I 

A  Senate  bill  would 
create  incentives  for 
sharing  of  cybervul¬ 
nerability  information. 

www.computerworld.com/q?24329 


The  Role  of  the  New  CIP  Board 

Initiate  cooperation  with  private  firms,  state  and  local 
governments. 

Enhance  information  sharing. 

. 

Conduct  incident  coordination  and  crisis  response  along 
with  the  NIPC  and  other  agencies. 

Recruit,  train  and  retain  government  IT  security  experts. 

Promote  IT  security  research  and  development. 

Coordinate  information  sharing  between  law  enforcement 
and  national  security  agencies. 


Feds  Ask  Business  Leaders  to 
Help  Protect  Infrastructure 


COMPUTERWORLD  October  22, 2001 


a 


Proposed  Federal  Privacy  Law  Would  Override  States 


Potential  New  Privacy  Rules 

Members  of  a  key  House  committee  are  preparing  to  introduce  a 
major  privacy  bill  next  year  affecting  off-line  and  online 
privacy  practices.  Key  provisions  include: 

Federal  preemption:  The  legislation  will  prevent  states 
from  adopting  tougher  privacy  rules  on  their  own. 

Liability  limits:  Restrictions  will  be  set  on  class  action 
lawsuits  filed  against  privacy  violators. 

Opt-out:  If  online,  a  user  may  have  to  uncheck  a  box  to 
be  excluded  from  data  sharing. 

Privacy  notices:  Web  sites  will  be  required  to  have  clear  and 
conspicuous  privacy  notices. 

Safe  harbor  provision:  A  company  would  be  considered  in 
compliance  with  the  federal  baseline  rules  if  it  belonged  to  a 
private  certification  program. 

Enforcement  agency:  Federal  Trade  Commission 


Bill  aims  to  prevent 
patchwork  rules  on 
data  collection,  use 

BY  PATRICK  THIBODEAU 

WASHINGTON 

A  comprehensive  data  privacy 
bill  to  be  introduced  next  year 
in  the  U.S.  House  will  apply  to 
online  and  off-line  practices,  af¬ 
fecting  virtually  every  company 
that  does  business  in  the  U.S. 

The  legislation,  which  has 
the  backing  of  some  key  con¬ 
gressional  leaders,  will  set 
baseline  standards  on  privacy, 
requiring  clear  and  conspicu¬ 
ous  data  privacy  notices.  It  will 
also  give  customers  the  ability 
to  prevent  a  company  from 
selling  their  personal  informa¬ 
tion  and  require  a  “security 
statement”  explaining  what 
precautions  a  company  has 
taken  to  protect  private  infor¬ 
mation. 

But  the  bill,  proposed  by 
leaders  of  the  House  Energy 
and  Commerce  Committee, 
will  be  tied  to  a  big  carrot  in  an 
effort  to  win  corporate  backing, 
namely  federal  preemption  of 
any  state  privacy  laws.  The  in¬ 
tent  is  to  prevent  a  patchwork 
of  privacy  legislation,  varying 
from  state  to  state. 

If  large  commercial  states 
such  as  California  were  to 
adopt  their  own  privacy  laws, 
companies  such  as  Columbus, 
Ohio-based  Nationwide  Finan¬ 
cial  Services  Inc.  could  be 
forced  to  spend  millions  of  dol¬ 
lars  to  bring  systems  into  com¬ 
pliance  with  those  laws,  said 
Kirk  Herath,  chief  privacy  offi¬ 
cer  at  Nationwide. 

Protective  Measure 

But  so  far,  the  prospect  of 
varying  state  laws  has  re¬ 
mained  only  a  threat.  States 
have  recognized  that  problem, 
said  Herath,  a  frequent  speaker 
on  privacy  issues. 

“I  believe  the  vast  majority 
of  states  have  heard  us  and 
have  done  the  right  thing  by  re¬ 
maining  uniform,”  he  said.  The 
insurance  industry,  mostly 
through  its  trade  groups,  has 


been  opposing  adoption  of 
state  privacy  laws. 

The  proposal,  which  was  in¬ 
troduced  by  Commerce  Com¬ 
mittee  Chairman  Billy  Tauzin 
(R-La.),  and  some  other  key 
House  leaders,  is  getting  mixed 
reviews. 

Privacy  advocates  said  the 
proposal  fell  short  of  what  they 
want;  industry  groups  were 
wary  about  potential  fine  print. 

For  instance,  the  frame¬ 
work’s  provisions  call  for  easy- 
to-read  and  conspicuous  priva¬ 
cy  policy  notices.  That  led  to 
questions  about  how  such  a  re¬ 
quirement  would  affect  Web 
site  design. 

“How  do  you  make  that  clear 
and  conspicuous?”  asked  Mark 
Uncapher,  vice  president  and 
counsel  at  the  Information 
Technology  Association  of 
America  in  Arlington,  Va., 


BY  PATRICK  THIBODEAU 

WASHINGTON 

Concerns  about  bioterrorism 
at  the  U.S.  Capitol  preempted 
consideration  of  a  time-sensi¬ 
tive  Internet-related  measure, 
the  extension  of  the  online  tax 
moratorium,  which  expired 
yesterday. 

The  U.S.  House  of  Represen¬ 
tatives  last  week  approved  a 
two-year  extension,  far  shorter 
than  the  Five-year  extension 
proponents  originally  wanted 
but  easier  to  pass  because  of  the 
controversy  surrounding  the 
bill.  But  the  Senate  failed  to  act 
by  the  end  of  last  week,  thus  al¬ 
lowing  the  ban  to  expire.  That 
means  state  and  local  govern¬ 
ments  could  begin  imposing  ac¬ 
cess  taxes,  if  they  choose  to. 

Senate  debate  was  cut  short 
by  the  Capitol  anthrax  sweep, 
and  the  issue  could  resurface 
in  the  Senate  this  week. 


which  has  opposed  privacy  reg¬ 
ulation.  “The  challenge  is  to  get 
the  right  level  of  specificity.” 

Ari  Schwartz,  a  policy  ana- 


The  moratorium  affected 
only  Internet  access  taxes, 
which  critics  have  assailed  as 
akin  to  charging  someone  ad¬ 
mission  to  enter  a  shopping 
mall.  But  the  issue  has  been 
tied  to  the  broader  question  of 
whether  online  sellers  should 
collect  sales  taxes  from  all  of 
their  customers. 

Simplicity  Sought 

Under  current  law,  a  busi¬ 
ness  is  required  to  collect  sales 
taxes  only  in  states  where  it 
has  a  physical  presence.  But 
nearly  40  states  are  involved  in 
an  effort  to  simplify  sales  tax¬ 
es,  create  one  rate  per  state  and 
reduce  the  burdens  on  busi¬ 
ness  for  collection  of  sales  tax¬ 
es.  Backers  of  this  effort  want 
Congress  —  in  any  extension 
of  the  access  tax  moratorium 
—  to  also  signal  support  for  ex¬ 
panded  sales  tax  collection 


lyst  at  The  Center  for  Democ¬ 
racy  &  Technology  (CDT)  in 
Washington,  said  the  proposal 
is  “too  weak  to  protect  individ- 


obligations  if  tax  simplifica¬ 
tion  can  be  achieved. 

It’s  uncertain  what  will  hap¬ 
pen  now  that  the  moratorium 
has  ended. 

“Nothing  —  nothing  —  is  go¬ 
ing  to  happen  on  Monday,”  said 
Frank  Shafroth,  director  of 
state/federal  relations  at  the 
National  Governors  Associa¬ 
tion,  who  sees  no  clamor 
among  the  states  for  taxing  In¬ 
ternet  access. 

But  Mark  Nebergall,  chair¬ 
man  of  The  Internet  Tax  Fair¬ 
ness  Coalition,  which  is  back¬ 
ing  the  moratorium  extension, 
said  a  failure  by  Congress  to 
act  would  be  a  signal  to  the 
states  “that  it’s  OK  for  them  to 
impose  special  taxes  on  elec¬ 
tronic  commerce.”  The  action 
wouldn’t  come  from  state  leg¬ 
islatures,  but  from  state  rev¬ 
enue  authorities  interpreting 
current  laws,  he  said. 

A  study  released  this  month 
by  the  Center  for  Business  and 
Economic  Research  at  the  Uni¬ 
versity  of  Tennessee  in  Knox¬ 
ville  estimates  that  e-com¬ 
merce  this  year  is  likely  to  cost 
state  and  local  governments 
$13.3  billion  in  lost  tax  collec¬ 
tions.  By  2006,  that  loss  will 
reach  $45.2  billion.  ft 


Tax  Moratorium  Expires  as 
Anthrax  Distracts  Senate 

States  could  burden  Net  sales  with  levies 


uals  in  the  networked  econo¬ 
my”  and  would  do  little  to 
bring  people  who  are  worried 
about  privacy  protections 
back  online.  The  proposal  re¬ 
lies  on  an  opt-out  model, 
which  requires  a  user  to  affir¬ 
matively  reject  information 
sharing. 

There’s  a  good  reason  for 
businesses  to  support  privacy 
rules:  consumer  privacy  con¬ 
cerns  are  hurting  online  com¬ 
merce,  said  John  McCarthy,  an 
analyst  at  Forrester  Research 
Inc.  in  Cambridge,  Mass.  Con¬ 
sumer  concerns  about  privacy 
cost  online  businesses  at  least 
$15  billion  annually,  he  said. 
Forrester  estimates  that  total 
online  spending  this  year  will 
be  $51  billion. 

“Privacy  is  now  the  No.  1 
reason  why  people  do  not 
shop  online,”  said  McCarthy. 
The  Commerce  Committee 
proposal  “would  at  least  put 
some  clear  rules  in  place,”  he 
said.  I 


Changes  Eyed  in 
Cyberdefenses 

A  special  congressional  commis¬ 
sion,  headed  by  Virginia  Gov. 
James  Gilmore,  that’s  investigat¬ 
ing  weapons  of  mass  destruction 
outlined  recommendations  last 
week  for  improving  cyberdefens¬ 
es.  But  a  presentation  by  Gilmore 
before  the  U.S.  House  Science 
Committee  was  cut  short  be¬ 
cause  of  bioterrorism  concerns 
at  the  Capitol.  The  following  were 
his  recommendations: 

■  Establish  a  third-party  media¬ 
tor  by  creating  a  nonprofit  group 
that  could  resolve  disputes  over 
the  sharing  of  security  informa¬ 
tion  between  the  private  sector 
and  government. 

■  Create  a  “cybercourt"  to  be 
overseen  by  judges  with 
expertise  in  cyberdefense  issues. 

■  Improve  planning  on  the  way 
the  government  handles  IT 
research. 

-  Patrick  Thibodeau 
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Microsoft  Sales  Up, 
But  Profits  Down 


Citing  strong  sales  of  Windows 
2000  and  its  enterprise  server  soft¬ 
ware,  Microsoft  Corp.  reported  S6.1 
billion  in  revenue  for  its  first  quarter 
ended  Sept.  30,  up  6°/o  from  S5.8 
billion  in  the  same  period  last  year. 
First-quarter  net  income  was  $1.3 
billion,  down  from  the  year-earlier 
level  of  $2.2  billion  due  to  more 
than  $1  billion  in  investment  losses. 


New  Mediator  Picked 
In  Antitrust  Case 

Eric  D.  Green,  a  Boston-based  trial 
mediator,  author  and  law  professor, 
was  chosen  by  the  two  sides  in  the 
Microsoft  antitrust  case  to  try  to 
help  them  reach  a  settlement.  U.S. 
District  Court  Judge  Colleen  Kollar- 
Kotelly  has  set  a  Nov.  2  deadline  for 
producing  a  settlement,  but  legal 
analysts  said  they  expect  her  to 
extend  the  deadline  if  Green  reports 
that  he’s  making  progress. 


Sun  Loses  $180M; 
Revenue  Drops  43% 

Sun  Microsystems  Inc.  reported  a 
$180  million  net  loss  for  its  first 
quarter  ended  Sept.  30,  as  revenue 
plummeted  43%  from  the  same  pe¬ 
riod  a  year  ago.  Sun  did  $2.9  billion 
worth  of  business  in  the  first  quar¬ 
ter,  down  from  year-earlier  revenue 
of  $5  billion.  The  company  warned 
of  the  loss  earlier  this  month  and 
said  it  would  lay  off  3,900  employ¬ 
ees,  cutting  its  workforce  by  9%. 


Short  Takes 

CISCO  SYSTEMS  INC.  recalled 
about  95,000  power  adapters  sold 
with  six  of  its  Asymmetric  Digital 
Subscriber  Line  routers,  saying  they 
can  overheat,  causing  a  fire  hazard. 
. . .  Worldwide  PC  shipments  de¬ 
clined  by  more  than  10%  year  over 
year  in  the  third  quarter,  according 
to  both  Framingham,  Mass.-based 
(DC  and  GARTNER  INC.’s  DATA- 
QUEST  INC.  unit  in  San  Jose. 


Web  Services  Get 
Off  Drawing  Boards 

Users  implement  new  technology  as 

part  of  application  integration  projects 


BY  MICHAEL  MEEHAN 

NTIL  NOW,  WEB 
services  have  been 
more  theory  than 
reality.  But  users 
are  starting  to 
turn  to  them  as  a  way  to  de¬ 
mocratize  enterprise  applica¬ 
tion  integration  (EAI). 

An  early  adopter  of  this 
nascent  application  develop¬ 
ment  approach  is  Wachovia 
Securities  Inc.,  which  is  setting 
up  a  Web  services  pilot  pro¬ 
gram  with  Thomson  Financial, 
a  $2  billion  Boston-based  in¬ 
formation  services  company. 

If  the  pilot  program  is  suc¬ 
cessful,  Wachovia  plans  to 
replicate  the  services  with 
smaller  partners. 

“The  concept  for  me  is  to 
externalize  my  internal  data 
sets,”  said  John  D’Agostino, 
chief  operating  officer  at  Win¬ 
ston-Salem,  N.C.-based  finan¬ 
cial  services  provider  Wa¬ 
chovia.  “In  the  past,  I  would 
have  to  set  up  direct  links  be¬ 
tween  myself  and  my  partners 
or  use  some  third-party  vendor 
to  do  it.” 

Speeding  Applications 

D’Agostino’s  criticism  of 
e-business  to  date  is  that  the 
applications  have  been  expen¬ 
sive  and  can  force  users  to 
mimic  the  one-to-one  links  in 
the  off-line  world. 

“My  hope  with  Web  services 
is  that  they’ll  actually  reach 
that  broader  audience  in  a 
simple  but  useful  fashion,” 
D’Agostino  said. 

San  Francisco-based  Grand 
Central  Networks  Inc.  will  be 
the  EAI  vendor  in  this  case,  us¬ 
ing  Web  services  to  get  the  job 
done.  Applications  will  en¬ 
counter  one  another  on  the 
network  using  the  Simple  Ob¬ 
ject  Access  Protocol  (SOAP) 
and  be  identified  using  the 


emerging  Web  Services  De¬ 
scription  Language  (WSDL). 

In  a  separate  initiative, 
Gaithersburg,  Md.-based  GE 
Global  exchange  Services 
(GXS)  and  Houston-based  Fuel- 
Quest  Inc.  announced  the 
creation  of  a  Web  services- 
based  EAI  program  that  lets 
fuel  distributors  plug  into  a 
GXS-hosted  trading  network 
of  U.S.  refiners. 

When  regional  distributors 
load  up  a  truck  at  a  refinery, 
they  will  receive  an  electronic 
bill  of  lading  that  downloads 
directly  into  their  financial 
systems.  The  bill  can  then  be 
passed  along  to  the  distribu¬ 
tors’  customers. 

“In  an  industry  where  fax 
machines  were  a  novelty  a 
decade  ago,  this  is  a  big  deal,” 
said  Mary  Wilson,  vice  presi¬ 
dent  at  J.E.  DeWitt  Inc.,  a 
South  El  Monte,  Calif.-based 


Once  limited  to  use  by  a  few  highly 
trained  technicians,  enterprise  ap¬ 
plication  integration  (EAI)  is  matur¬ 
ing  into  a  broadly  useful  tool  for  IT. 

Sylvain  Pendaries,  director  of 
IT  for  capital  markets  at  the  New 
York-based  arm  of  French  bank  So- 
ciete  Oenerale  Group,  has  seen  EAI 
grow  up  since  his  first  encounter 
with  Tibco  Software’s  Rendezvous 
product  in  1996. 

“It  took  care  of  transport,  but 
that  was  mainly  a  tool  for  techni¬ 
cians,"  Pendaries  said. 

Societe  Generale  now  plans  to 
migrate  to  Tibco’s  latest  EAI  man¬ 
agement  tool  with  an  eye  toward 
making  it  a  working  part  of  every 
employee's  life. 

“It’s  far  more  than  a  collection  of 
systems  linked  with  middleware;  it’s 
more  of  a  business  information  net¬ 
work,"  he  said. 

According  to  Daryl  Plummer,  an 


petroleum  distributor. 

Wilson  noted  that  manual 
data  entry  of  paper  bills  of  lad¬ 
ing  has  long  been  a  problem 
in  the  fuel  distribution  indus¬ 
try.  But  previous  e-commerce 
solutions  proved  either  too 
costly,  too  complex  or  too  cut¬ 
throat,  she  said. 

“Some  vendors,  you  could 
tell  by  the  way  they  were  build¬ 
ing  their  systems  that  their  ul¬ 
timate  goal  was  to  control  the 
customer  base  and  cut  me  out,” 
Wilson  said. 

Off-Loading  to  Smaller  Firms 

GXS  Chief  Technology  Offi¬ 
cer  Frank  Campagnoni  ex¬ 
plained  that  the  new  system  is 
just  a  way  to  off-load  applica¬ 
tions  to  smaller  companies. 

The  standard  program  inter¬ 
faces  have  been  defined  using 
WSDL.  It’s  the  first  time  GXS 
has  used  this  Web  service  com¬ 
mercially,  but  Campagnoni 
called  the  EAI  program  “the 
first  blush  of  a  strategic  initia¬ 
tive  that’s  going  to  be  imple¬ 
mented  inside  of  GXS.” 


analyst  at  Gartner  Inc.  in  Stamford, 
Conn.,  EAI  vendors  are  attempting 
to  evolve  their  products  into  busi¬ 
ness-process  management  tools 
that  let  nontechnical  workers  adjust 
inputs  and  outputs  in  order  to  make 
changes  in  a  system  without  having 
to  touch  any  code. 

“It's  not  there  yet.  But  is  that  the 
plan?  Is  that  the  direction?  Is  that 
the  next  step?  I’d  have  to  say  yes,” 
Plummer  said.  “It's  moving  up  the 
food  chain,  so  to  speak.” 

Cynthia  Pacheco,  operations 
manager  for  e-care  services  at 
Philips  Medical  Systems  North 
America  Inc.  in  Bothell,  Wash.,  a 
division  of  Royal  Philips  Electronics 
NV,  is  looking  to  next-generation 
EAI  products  from  Cysive  Inc.  in 
Reston,  Va. 

Philips  Medical  sells  and  leases 
in-home  cardiac  monitoring  devices 
to  chronic  care  facilities  and  in- 


GLOSSARY 


New  Tools 

WSDL:  Web  Services  Description 
Language  is  an  XML-based  language 
used  to  describe  the  services  a  business 
offers  and  to  provide  a  way  for  individuals 
and  other  businesses  to  access  those 
services  electronically. 

SOAP:  Simple  Object  Access  Protocol 

allows  operating  systems  to  speak  with  one 
another  over  the  Web  using  HTTP  and  XML. 

UDDI:  Universal  Description,  Discov¬ 
ery  and  Integration  is  envisioned  as  a 
Web-based  Yellow  Pages  where  businesses 
can  list  pertinent  information,  including  the 
services  they  offer. 


“Up  until  this  point,  we 
haven’t  really  had  the  access 
mechanisms  from  the  Internet 
into  our  systems,”  he  added. 

Other  EAI  vendors  plan  to 
follow  in  the  Web  services  are¬ 
na.  Andrea  Eubanks,  director 
of  products  at  Tibco  Software 
Inc.,  said  the  Palo  Alto,  Calif.- 
based  company  plans  in  the 
first  quarter  of  next  year  to  re¬ 
lease  its  own  set  of  SOAP  in¬ 
terfaces  and  WSDL  adapters. 

Karen  Peterson,  an  analyst 
at  Stamford,  Conn.-based  re¬ 
search  firm  Gartner  Inc.,  said 
that  applications  will  eventual¬ 
ly  be  built  using  Web  services. 
But  the  early  payoff  for  users 
will  be  in  the  EAI  space,  she 
added.  ft 


home  congestive  heart  failure 
patients. 

Because  many  of  the  devices 
get  recycled,  Pacheco  said,  the 
initial  use  for  the  Cysive  product 
would  be  to  co-manage  supply 
chain  order  tracking  and  patient 
care  information. 

However,  future  iterations  of  the 
application  may  be  most  important 
as  the  company  adds  medical  per¬ 
sonnel  and  hospital  administrators 
to  the  network. 

“These  aren't  technical  people. 
Ease  of  use  is  a  big  issue  for  us,” 
Pacheco  said. 

Andrea  Eubanks,  Tibco's  director 
of  products,  acknowledged  that  the 
market  is  shifting. 

“It’s  no  longer  about  competitive 
advantage,”  she  said.  “The  users 
now  want  more  business  use  and 
less  reliance  on  the  network  guys." 

-  Michael  Meehan 


EAI  Software  Shifts  to  Business-Process  Management  Uses 


You're  right,  Dell  doesn't  have  one  service  person  with  all  the  answers. 
There  are  thousands  more  where  Carl  came  from. 
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Sprint  Drops  ION,  Freezes 

Fixed  Wireless  Service 


Users  of  costly  integrated  network 

need  to  switch  to  other  technologies 


BY  JAMES  COPE 

print  corp.  last  week 
announced  that  it’s 
pulling  the  plug  on 
ION,  its  converged 
communications  sys¬ 
tem,  and  putting  a  hold  on  sales 
of  its  broadband  fixed  wireless 
service  until  “substantial  prog¬ 
ress”  is  made  in  developing  a 
new  version  of  that  technology. 

Sprint  said  it  will  try  to  tran¬ 
sition  users  of  its  Integrated 
On-Demand  Network  (ION) 
service  to  other  technologies. 
The  400  corporate  customers 
that  now  use  ION  will  be 
redirected  to  the  company’s 
Asynchronous  Transfer  Mode 
(ATM)  and  virtual  private  net¬ 
work  services,  said  a  Sprint 
spokesman. 

ION,  which  was  introduced 
three  years  ago,  is  an  ATM- 
based  service  that’s  designed 
to  handle  voice,  data  and  video 
communications  on  a  single 
network.  But  the  company 
spokesman  said  it  would  have 
taken  as  many  as  three  more 
years  to  make  ION  profitable. 

Small  Users 

A  few  large  companies,  in¬ 
cluding  Hallmark  Cards  Inc.  in 
Kansas  City,  Mo.,  and  Yellow 
Freight  System  Inc.  in  Over¬ 
land  Park,  Kan.,  had  signed  up 
to  use  ION.  But  most  of  the 
service’s  corporate  users  were 
smaller  businesses,  according 
to  Sprint. 

Mason  Rotelli,  an  ION  user 
and  CIO  at  cabling  distributor 
Communications  Supply  Corp. 
in  Carol  Stream,  Ill.,  said  he 
was  “very  disappointed”  when 
Sprint  told  him  it  was  discon¬ 
tinuing  the  service.  Communi¬ 
cations  Supply  has  been  using 
ION  for  data  network  connec¬ 
tions  between  its  headquarters 
and  32  regional  offices  as  well 
as  for  Internet  access  and  voice 


telephone  services. 

“ATM  and  ION  were  the 
right  technologies,”  said  Ro¬ 
telli.  Sprint  agreed  to  support 
his  ION  setup  for  another  18 
months,  completing  the  term 
of  Communications  Supply’s 
contract,  he  added.  After  that, 
Rotelli  said,  he  will  look  at  the 
alternatives  Sprint  has  to  offer 
before  shopping  elsewhere. 

Michael  Speyer,  an  analyst  at 
The  Yankee  Group  in  Boston, 
said  the  ION  technology  “was 
mostly  there”  from  a  develop¬ 


Continued  from  page  1 

E-Signatures 

been  a  good  bit  slower  than 
most  people  would  have  ex¬ 
pected,”  said  Thomas  Crocker, 
a  lawyer  at  Washington-based 
Alston  &  Bird  LLP  who  earlier 
this  year  submitted  comments 
on  the  issue  to  the  Federal 
Trade  Commission. 

The  so-called  E-Sign  legisla¬ 
tion  gives  electronic  signa¬ 
tures  and  contracts  the  same 
legal  standing  as  their  ink 
counterparts.  But  although  it 
arrived  with  much  fanfare  and 
hype,  the  law  has  failed  to 
trigger  any  widespread  adop¬ 
tion  of  electronic  signatures, 
said  Steve  Schutze,  director 
of  e-strategies  at  the  Washing- 
ton-based  American  Bankers 
Association.  The  organization 
represents  nearly  98%  of  all 
banks  operating  in  the  U.S. 

“Even  though  it’s  been  a  year, 
people  are  still  asking  about 
how  to  implement  e-signatures 
and  finding  out  how  to  manage 
their  risk,  as  well  as  protect 
customer  assets  and  their  own 
interest,”  Schutze  said. 

That’s  because  “the  E-Sign 
act,  in  its  present  form,  fails  to 


ment  standpoint.  But  sales  were 
lower  than  expected,  making  it 
a  huge  cash  drain  on  the  com¬ 
pany,  he  said. 

Another  analyst,  Rob  Carl¬ 
son  at  Current  Analysis  Inc. 
in  Sterling,  Va.,  estimated  that 
Sprint  has  spent  between  $4 
billion  and  $5  billion  on  ION. 
With  a  total  of  about  4,000 
customers  when  consumers 
are  included,  that  investment 
amounts  to  more  than  $1  mil¬ 
lion  per  user,  Carlson  said. 

Sprint  isn’t  completely  exit¬ 
ing  the  fixed  wireless  business. 
The  company  will  stop  selling 
its  Multichannel  Multipoint 
Distribution  Service  (MMDS) 
offering  to  new  customers  and 


deliver  on  its  promises  of  uni¬ 
formity,  consistency  and  legal 
certainty,”  Crocker  said. 

For  starters,  the  E-Sign  law 
doesn’t  specify  what  consti¬ 
tutes  an  electronic  signature, 
leaving  it  to  the  industry  to 
develop  the  needed  standards, 
according  to  Meredith  Hick¬ 
man,  an  analyst  at  Celent  Com¬ 
munications  LLC  in  New  York. 
Everything  from  passwords 
and  personal  identification 
numbers  to  dual-key  encryp¬ 
tion,  digital  certificates  and 
biometrics  can  be  used  as 
electronic  signatures.  “There¬ 
fore,  there  is  no  obvious  choice 
for  companies  to  choose  when 
building  out  their  infrastruc¬ 
ture,”  said  Hickman. 

Companies  are  particularly 
reluctant  to  use  electronic  sig¬ 
natures  for  big  transactions, 
such  as  signing  a  mortgage 
contract,  said  Richard  Lewis, 
chief  technology  officer  at 
ClosingGuard.com  Inc.,  a  New 
York-based  mortgage  closing 
services  company.  That’s  be¬ 
cause  there  isn’t  yet  a  reliable 
way  to  establish  the  identity  of 
people  online,  Lewis  said. 

Unlike  driver’s  licenses  and 
other  legal  forms  of  identifica¬ 
tion,  most  of  the  forms  of  ID 
used  online,  such  as  digital  cer- 


freeze  the  number  of  markets 
in  which  the  service  is  avail¬ 
able.  But  Sprint  said  it  will 
continue  to  support  existing 
MMDS  users. 

The  problem  with  MMDS, 
the  Sprint  spokesman  said,  is 
that  the  current  line-of-sight 
technology  limits  its  coverage 
area  to  50%  or  less  of  the  mar¬ 
ket  in  most  metropolitan  areas. 

Sprint  is  working  on  a  sec¬ 
ond-generation  MMDS  service 
that  it  hopes  will  mitigate  the 
coverage  problems,  but  the 
company  wouldn’t  say  when 
that  upgrade  might  be  avail¬ 
able  to  customers. 

Chandra  Welton,  Internet 
sales  manager  at  Larry  Roesch 


tificates,  are  issued  by  a  variety 
of  vendors,  not  by  a  single  gov¬ 
erning  entity,  he  said. 

And  since  there’s  no  case  law 
based  on  the  use  of  electronic 
signatures,  there’s  no  telling 
how  an  electronically  signed 
document  such  as  a  mortgage 
contract  would  hold  up  if  chal¬ 
lenged  in  court  10  years  down 
the  road,  Lewis  said. 

A  lack  of  common  standards 
among  the  infrastructure  tech¬ 
nologies  in  an  e-signature  net¬ 
work  only  compounds  this 
problem,  said  Tom  Greco, 
president  of  Digital  Signature 
Trust  Co.,  a  digital  certificate 
vendor  in  Salt  Lake  City. 

It’s  also  crucial  for  compa¬ 
nies  to  understand  the  technol¬ 
ogy  and  business  implications 
of  the  consumer  protection 
provisions  built  into  the  E-Sign 
law,  said  Eric  Goldberg,  assis¬ 
tant  counsel  at  the  Washing- 
ton-based  American  Insurance 
Association,  which  represents 
more  than  370  large  and  small 
insurers  nationwide. 

Under  the  E-Sign  law,  com¬ 
panies  that  accept  electronic 
signatures  have  to  go  through  a 
series  of  steps  to  inform  con¬ 
sumers  about  other  options 
and  get  their  consent.  Compa¬ 
nies  also  need  to  ensure  that 


JUST  THE  FACTS 


Service 

Interruptions 

The  cutbacks  that  Sprint 
announced  last  week  include 
the  following: 

■  Its  ION  integrated  networking  service 
will  be  shut  down,  forcing  users  to  switch 
to  other  offerings. 

■  Marketing  of  its  MMDS  fixed  wireless  ser¬ 
vice  will  be  stopped  indefinitely,  although 
existing  users  will  still  be  supported. 

■  6,000  Sprint  workers  will  be  laid  off,  and 
1,500  contractors  will  be  let  go. 

■  The  company  will  take  a  $2  billion  charge 
to  cover  costs  associated  with  the  ION 
shutdown  and  job  cuts. 


Chrysler  Jeep  in  Elmhurst,  Ill., 
said  the  MMDS  service  the  car 
dealer  installed  this  summer  is 
working  fine. 

“At  this  point, . . .  I’m  not 
that  concerned  [about  Sprint’s 
decision],”  Welton  said.  > 


consumers  reasonably  demon¬ 
strate  their  ability  to  store  and 
access  digital  documents  be¬ 
fore  they  are  allowed  to  send 
and  receive  digital  documents. 

Such  stipulations  can  result 
in  a  legal  quagmire  for  compa¬ 
nies,  Goldberg  said. 

Dueling  state  and  federal 
statutes  are  also  a  major  prob¬ 
lem,  Crocker  said. 

In  July  1999,  the  Chicago- 
based  National  Conference  of 
Commissioners  on  Uniform 
State  Laws  adopted  the  Uni¬ 
form  Electronic  Transactions 
Act  (UETA),  which  like  E-Sign, 
legalizes  electronic  documents 
and  signatures.  The  consumer 
consent  provisions  of  UETA 
aren’t  quite  as  stringent  as 
those  in  E-Sign.  But  because 
of  the  way  E-Sign  has  been 
drafted,  some  of  the  states  that 
adopted  UETA  are  sticking  to 
its  provisions.  In  other  states, 
it’s  not  clear  which  law  busi¬ 
nesses  should  follow. 

As  a  result,  companies,  espe¬ 
cially  those  with  operations  in 
multiple  states,  aren’t  sure  how 
to  proceed,  Goldberg  said.  I 


Most  companies  will 
use  e-signatures  in  B2B 
transactions  rather  than 
in  consumer  commerce: 


www.compu1erwortd.com/q?24285 
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THE  STRAIGHT  GOODS  ON  RESTRICTED  PROMOTIONS 


V. 


Oracle  has  issued  a  bold  offer.  They'l 
give  a  million  dollars  to  any  DB2, 
WebLogic  or  SQL  Server  user  who 
switches  to  Oracle  technology  and 
fails  to  triple  the  performance  of 
their  website.  Pretty  impressive  talk. 

Some  say  Oracle  is  putting  their 
money  where  their  mouth  is.  But 
for  Sybase  users,  it's 
pure  silence. 

For  that,  we  apologize. 

But  we  wonder.  Why 
are  Sybase  users 
exempt  from  this 
extraordinary  piece 
of  generosity? 

To  begin  with,  our 
tests  show  that  Sybase 
Enterprise  Application 
Server  (EAServer) 
is  right  there  with 
Oracle,  performing  as 
fast  and  sometimes 
faster  than  some  of 
our  competition. 

EAServer  4.0  has 
what  it  takes  to 
manage  millions  of 
transactions  a  day 
and  the  scalability 
to  reliably  support 
thousands  upon 
thousands  of 
concurrent  users. 

Big  deal,  you  say. 

That's  the  cost  of  entry  for  an  app 
server.  We  think  not. 

The  real  cost  of  entry  is  what  happens 
when  your  app  server  enters  your 
environment 

Will  your  app  server  leverage  your 
existing  investments?  Or  will  it 
strangle  your  IT  department  for  a 


couple  of  months  in  a  slow  and  very 
painful  integration  process? 

In  reality,  that’s  where  all  the  really 
substantial  costs  are  hidden. 

And  it’s  here  where  EAServer  really 
leaves  the  competition  whimpering. 
EAServer  is  the  most  open  application 


server  available  on  the  planet.  It's 
J2EE  certified.  It  supports  C,  C++, 
CORBA,  COM  and 
PowerBuilder,  as  well 
as  virtually  every 
switch,  server  and 
legacy  system 
known  to  IT.  It 
also  allows  for 
complete  integration 


with  any  back-end  database  using 
JDBC  or  ODBC  databases. 

Just  run  those  specs  up  against  the 
competitors. 

Naturally,  it  also  has  enterprise-class 
security.  The  kind  of  security  you  can 
bet  a  couple  of  million  credit  card 
numbers  on. 


And  last  but  not  least, 
EAServer  provides  you 
with  a  wicked  fast  and 
intuitive  development 
environment  that  will 
amaze  your  friends  and 
delight  your  superiors 
as  you  get  your  stuff 
out  to  the  market  really, 
really  fast. 

So  there  you  have  it. 

We  think  perhaps  now 
you  have  a  much  better 
understanding  of  why 
all  Sybase  users  were 
excluded  from  the  very 
famous  Oracle  lottery. 

Indeed,  we're  sorry  our 
technology  does  make 
you  ineligible  for  those 
Oracle  millions.  But 
look  on  the  bright  side: 
With  EAServer,  you 
can  help  your  business 
earn  some  millions  of 
its  very  own. 


For  more  information  on  how  you 
can  get  a  great  application  server, 
if  not  a  million  bucks,  visit 
www.sybase.com/custorners 
or  call  1-800-8-SYBASE. 

B  Sybase 

Information  Anywhere’ 
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EVERYTHING  WORKS  TOGETHER'. 


SYBASE  e-BUSINESS  SOFTWARE. 
BECAUSE  EVERYTHING  WORKS  BETTER  WHEN 
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CA  Again  Reports 
Conflicting  Results 

Computer  Associates  International 
Inc.  again  reported  two  sets  of  fi¬ 
nancial  results  with  sharp  differ¬ 
ences.  Under  a  new  accounting  and 
revenue  formula  it  adopted  last 
year,  the  Islandia,  N.Y.-based  soft¬ 
ware  vendor  earned  a  pro  forma 
profit  of  S359  million  on  revenue  of 
S1.4  billion  for  its  second  quarter 
ended  Sept.  30.  But  using  tradition¬ 
al  accounting,  CA  lost  S291  million 
on  revenue  of  S734  million. 


SAP  Cuts  Forecast, 
Hints  at  Layoffs 

Business  applications  vendor  SAP 
AG  reported  a  16%  year-over-year 
revenue  increase  for  the  third  quar¬ 
ter  but  lowered  its  sales  forecast  for 
the  rest  of  this  year  because  of  de¬ 
lays  in  software-buying  decisions  by 
users.  SAP  also  said  it’s  accelerat¬ 
ing  cost-cutting  actions,  “including 
adjusting  the  levels  and  mix  of  its 
employees,  particularly  in  the  U.S.” 


Compaq  Rolls  Out  Two 
New  AlphaServers 

Compaq  Computer  Corp.  added  new 
midrange  and  supercomputer  mod¬ 
els  to  its  AlphaServer  systems  line. 
The  midrange  ES45  server  runs 
Compaq's  Tru64  Unix  and  Open- 
VMS  operating  systems  plus  Linux, 
while  the  SC45  supercomputer  is 
Unix-based.  Compaq  said  the  ES45 
supports  up  to  four  of  its  64-bit  Al¬ 
pha  microprocessors.  Pricing  for 
that  system  starts  at  $58,000. 


Short  Takes 

Elmwood  Park,  N.J.-based  WEBMD 
CORP.  and  Durham,  N.C.-based 
QUINTILES  TRANSNATIONAL 
CORP.  settled  a  privacy-related  le¬ 
gal  dispute  and  agreed  to  drop  a 

data-sharing  deal _ Brampton, 

Ontario-based  NORTEL  NETWORKS 
CCRP.  reported  a  S3.5  billion  (U.S.) 
third-quarter  loss,  as  revenue  from 
continuing  operations  fell  by  45%. 


Symptoms  of  a  sickly  public  health  IT  infrastructure: 

►  Only  half  of  the  country’s  public  health  organizations 

(3,000  city  and  county  health  departments,  3,000  local  boards  of 
health  and  59  state  and  territorial  health  departments)  have  Internet 
connectivity. 

►  20%  of  those  departments  have  no  e-mail.  In  rural  states, 
local  health  departments  predominantly  access  e-mail  through 
dial-up  modems. 

►Lack  of  secure  communications,  combined  with  regulatory 
requirements  for  protecting  patient  information,  forces  some  state 
and  local  labs  to  communicate  their  findings  by  U.S.  mail. 

►State  and  local  public  health  authorities  operate  on  more  than 
100  disparate  data  systems  that  lack  integration,  slowing  the  flow  of 
information  and  data  analysis  in  times  of  crisis. 

►  Few  public  health  departments  operate  on  a  round-the-clock 
basis,  and  few  have  alert  systems  such  as  pagers  to  contact  emer¬ 
gency  personnel  after  normal  business  hours. 
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Anthrax 

tivity,  according  to  a  report  on 
the  public  health  infrastruc¬ 
ture  issued  by  the  Atlanta- 
based  CDC.  Another  20% 
lacked  e-mail  capability,  ac¬ 
cording  to  the  agency. 

Dr.  Paul  Weisner,  director  of 
the  Board  of  Health  in  DeKalb 
County,  Ga.,  said  a  robust  IT 
infrastructure  is  key  to  defend¬ 
ing  against  a  bioterrorism  at¬ 
tack.  “Early  detection  and  re¬ 
sponse  is  critical,  and  it  all 
hinges  on  communications 
and  information  technology,” 
he  said. 

The  CDC  tapped  the  subur¬ 
ban  Atlanta  county  for  a  pilot 
project  to  enhance  the  capabil¬ 
ities  of  the  nationwide  Health 
Alert  Network,  a  secure  sys¬ 
tem  intended  to  eventually 
connect  all  public  health  de¬ 
partments  with  the  CDC.  But 
Weisner  said  his  agency  lacks 
the  kind  of  basic  technology 
that  a  company  such  as  At¬ 
lanta-based  United  Parcel  Ser¬ 
vice  Inc.  uses  to  help  its  cus¬ 
tomers  track  packages. 

“We  need  to  get  into  the 
modern  age  of  communica¬ 
tions,”  he  said.  “UPS  lets  you 
track  a  package  in  real  time, 
but  I  can’t  track  my  emergency 
room  patients  in  real  time.  In¬ 
stead,  I  have  an  icon  on  my 
desk  here  that  only  gives  me  an 
update  every  24  hours.” 


Dr.  Rex  Archer,  director  of 
the  Kansas  City,  Mo.,  health 
department,  said  real-time  in¬ 
formation  is  needed  to  track 
not  only  emergency  room  vis¬ 
its,  but  also  other  indicators 
that  could  signal  the  spread  of 
a  natural  or  deliberate  out¬ 
break  of  disease. 

He  said  systems  should  track 
indicators  such  as  high  levels 
of  worker  absenteeism  and 
pharmacy  visits  and  then 
rapidly  collate  them.  The  pub¬ 
lic  health  system  also  needs  to 
be  able  to  correlate  informa¬ 


tion  from  examinations  of  pa¬ 
tients  exhibiting  the  same 
symptoms  so  that  it  can  re¬ 
spond  to  the  kind  of  crisis  the 
nation  faces  today,  he  said. 

But,  Archer  added,  the  pub¬ 
lic  health  infrastructure  is 
“woefully  inadequate’”  to  han¬ 
dle  a  major  crisis,  due  to  insuf¬ 
ficient  funding.  For  example, 
the  CDC  has  started  to  deploy 
a  secure  information  system 
called  the  Epidemic  Informa¬ 
tion  Exchange  (Epi-X),  which 
uses  digital  certificates  to  en¬ 
sure  data  privacy.  But  deploy¬ 
ment  of  the  full-scale  Epi-X 
system  has  been  restricted  to 
the  state  level,  leaving  Archer 
with  a  read-only  terminal. 
Archer  said  he  needs  the  full- 
scale  capability  of  Epi-X  today. 

The  lack  of  secure  commu¬ 
nications  systems  has  forced 
the  Iowa  Department  of  Public 
Health  to  send  lab  reports  via 
mail  to  protect  patient  privacy, 
said  Dr.  Patricia  Quinlisk, 
Iowa’s  state  epidemiologist,  in 
testimony  before  a  hearing  on 
bioterrorism  held  Oct.  3  by  the 
Labor,  Health  and  Human  Ser¬ 
vices,  and  Education  subcom¬ 
mittee  of  the  Senate  Commit¬ 
tee  on  Appropriations. 

Public  health  agencies  also 
need  to  integrate  their  data 
systems,  and  Quinlisk  has 
urged  Congress  to  provide  $50 


AT  A  GLANCE 


Health  Alert  Network 

►  Launched  by  Centers  for  Disease  Control  and  Prevention  in  1999  to  provide  a 
high-speed,  nationwide  secure  network  linking  CDC  to  state  and  local  health  departments. 
Purpose  is  to  boost  the  level  of  defense  against  health  threats,  including  bioterrorism. 

►  Enables  local  health  officials  nationwide  to  access  and  share  disease  reports, 
response  plans  and  CDC  diagnostic  and  treatment  guidelines. 

►  Provides  distance-learning  capabilities  through  Web-based  and  satellite  technolo¬ 
gies  to  upgrade  critical  health  skills  of  public  health  professionals. 

►  Provides  early  warning  systems,  such  as  broadcast  fax,  to  alert  local,  state  and  feder¬ 
al  authorities  about  urgent  health  threats  and  appropriate  responses. 

►  Operational  in  37  states;  links  Centers  for  Health  Preparedness  in  DeKalb  County, 

Ga.,  Denver,  and  Monroe  County,  N.Y.  Those  centers  develop  software  and  test  wireless  and 
other  technologies. 


►  Funding  from  1999  through  2001  totaled  S90  million.  State  and  local  public  health 
officials  say  network  needs  at  least  $200  million  in  funding  this  year. 

SOURCES  CDC  NATIONAL  ASSOCIATION  OF  CITY  AND  COUNTY  HEALTH  OFFICIALS  TESTIMONY  AT 
SENATE  LABOR.  HEALTH  AND  HUMAN  SERVICES  APPROPRIATIONS  SUBCOMMITTEE.  OCT  3.  2001 


million  this  year  for  a  new 
CDC  project  called  the  Nation¬ 
al  Electronic  Surveillance  Sys¬ 
tem.  That  system  is  designed 
to  integrate  as  many  as  100  sep¬ 
arate  data  systems  used  by  the 
nation’s  public  health  agencies. 
It  would  ensure  that  data 
analysis  can  be  done  rapidly, 
across  data  sets  and  regions,  so 
that  mandated  reporters  such 
as  physicians  will  find  report¬ 
ing  diseases  significantly  sim¬ 
plified,  Quinlisk  said. 

Archer  estimated  that  Con¬ 
gress  needs  to  beef  up  the  pub¬ 
lic  health  infrastructure  by 
about  $2  billion  this  year,  with 
about  a  quarter  of  that  devoted 
to  improving  the  IT  infrastruc¬ 
ture.  But  Congress  has  yet  to 
provide  any  major  funding, 
even  for  such  key  systems  as 
the  Health  Alert  Network. 

Barbara  Govert,  a  CDC 
spokeswoman,  described  the 
$90  million  in  funding  over  the 
past  three  years  for  the  nation¬ 
wide  network  as  “minimal.” 

“Maybe  the  events  of  the 
past  two  weeks  have  made  it 
easier  to  understand  the  im¬ 
portance  of  funding  health 
care  infrastructure,”  she  said.  ) 


Epi-X  Files 

The  mission  of  the  Epidemic 
Information  Exchange  is  to 
help  local,  state  and  federal 
health  officials  report  and 
discuss  disease  outbreaks, 
environmental  hazards  and 
other  health  events  as  they 
are  identified,  investigated 
and  reported.  Users  include: 

►State  health  officers 

►State  epidemiologists 

►State  veterinarians 

►State  lab  directors 

►Poison  control  center 
directors 

►Epidemic  Intelligence 
Service 


Anthrax  exposure  in 
the  Capitol  has  led  to 
a  shutdown; 
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ON  COMMUNICATIONS 


ORDERLY  NETWORK 

MIGRATION 


The  need  to  move  to  a  new  environment. 

Chances  are,  your  business  has  changed  since  your 
networks  were  deployed. You  may  have  implemented 
new  applications.  Experienced  exceptional  growth. 
Maybe  you  re-organized  or  merged.  Whatever 
changes  you  may  have  experienced,  you  can  take 
your  networks  where  they  need  to  go  with  AT&T's 
unique  combination  of  Skill,  Scale  and  Scope. 

The  skill  to  deliver  effective  solutions. 

With  thousands  of  experienced  network  professionals, 
AT&T  can  support  your  move  to  a  next  generation 
network. 

►  Proven  systems  and  processes 

►  Leading  expertise  in  security  and  continuity 

►  World-class  Service 
Level  Agreements 


jf ^ 


The  scale  to  implement  globally. 

When  your  company’s  solution  is  ready  to  fly,  it  can 
fly  virtually  everywhere. 

►  Scalable  innovations 

^  Industry-leading  global  IP  backbone 
^  Access  from  850  cities  worldwide 

The  scope  to  maximize  your  return. 

AT&T  has  a  wide  range  of  technologies,  services 
and  best-of-breed  partners  to  help  you  manage 
complexity  and  change. 

^  Connectivity  services 
^  Hosting  services 

►  Managed  services 

It  can  all  add  up  to  a  soaring  return  on  your 
communications  investment. 

Call  AT&T  toll  free  at 

>C 

I  866  329-1678  or  visit  us  at 
www.attbusiness.com/return 
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Canadian  Bank  Moves  to  Centralize  Online  Authentication 

Web-fraud  worries  drive  $30M  security 
software  rollout  at  financial  services  firm 


BY  LUCAS  MEARIAN 

Concerns  about  online  fraud 
are  prompting  Canadian  Impe¬ 
rial  Bank  of  Commerce  Inc. 
(CIBC)  to  invest  about  $30  mil¬ 
lion  over  the  next  three  years 
to  install  authentication  soft¬ 
ware  aimed  at  giving  its  6  mil¬ 
lion  customers  more  secure 
Web  access  to  their  accounts. 

Analysts  said  that  Toronto- 
based  CIBC  is  ahead  of  most 
financial  services  firms  with 
its  implementation.  Customer 
authentication  has  become 
the  fastest-growing  area  of  IT 
spending  in  the  financial  ser¬ 


vices  industry,  they  added. 

CIBC  is  using  software,  de¬ 
veloped  by  Waltham,  Mass.- 
based  Netegrity  Inc.,  that  offers 
security-related  features  such 
as  single  sign-on,  user  authen¬ 
tication  and  entitlement  man¬ 
agement,  which  governs  the 
applications  that  different  cus¬ 
tomers  can  access  via  the  Web. 

Andrew  Urquhart,  lead  proj¬ 
ect  manager  at  CIBC,  said  the 
SiteMinder  software  will  even¬ 
tually  be  implemented  at  more 
than  a  dozen  of  the  bank’s 
25  business  units.  CIBC  cus¬ 
tomers  will  be  able  to  use  the 


single  sign-on  feature  to  tap 
into  various  financial  services, 
including  retail  and  commer¬ 
cial  banking,  online  trading 
and  credit  card  transactions. 

For  financial  services  firms, 
that  type  of  integrated  ap¬ 
proach  to  security  is  “fairly 
unique,”  said  Dennis  Behrman, 
an  analyst  at  Meridien  Re¬ 
search  Inc.  in  Newton,  Mass. 
Many  companies  face  the  need 
to  consolidate  a  hodgepodge  of 
disparate  security  applications 
into  a  single  platform  that  can 
be  centrally  managed,  he  said. 

Centralizing  functions,  such 
as  online  user  authentication, 
can  reduce  IT  costs  and  tight¬ 
en  security,  according  to 
Behrman.  “If  I’m  managing 
eight  systems,  there  are  eight 


chances  those  systems  could 
be  compromised,”  he  said. 

CIBC,  which  has  $180  billion 
in  assets,  is  trying  to  eliminate 
its  own  hodgepodge  approach. 
The  project  first  began  taking 
shape  two  years  ago,  when 
John  Hunkin  took  over  as  the 
bank’s  chairman  and  CEO.  He 
initiated  a  program  to  give  cus¬ 
tomers  greater  access  to  their 
accounts  through  devices  such 
as  PCs  and  interactive  voice 
response  systems. 

Quest  for  Consistency 

Previously,  business  units 
handled  their  own  software  de¬ 
velopment,  “sometimes  coor¬ 
dinating  on  the  project,  some¬ 
times  not,”  Urquhart  said.  “I’m 
not  going  to  suggest  our  appli- 
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cations  aren’t  secure,  but  what 
this  [software]  provides  is  a 
starting  point  where  there’s  a 
consistent  level  of  security 
across  our  organization.” 

It  also  reflects  how  CIBC  is 
widely  viewed  as  an  IT  leader. 
Jerry  Silva,  an  analyst  at  Need¬ 
ham,  Mass. -based  Tower- 
Group,  said  CIBC  is  considered 
among  the  top  10  technology 
innovators  out  of  thousands  of 
financial  services  firms. 

While  CIBC  hasn’t  devel¬ 
oped  a  solid  return-on-invest¬ 
ment  model  for  the  security 
initiative,  Urquhart  said  it’s 
expected  to  deliver  some  im¬ 
mediate  IT  cost  savings  and 
help  the  bank  attract  more  cus¬ 
tomers  and  retain  a  higher  per¬ 
centage  of  them. 

In  addition,  a  feature  that 
lets  users  reset  their  passwords 
should  keep  CIBC  from  having 
to  increase  head  count  in  its 
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call  centers  “to  support  the 
growth  of  the  [online]  busi¬ 
ness,”  Urquhart  said. 

In  CIBC’s  case,  SiteMinder 
will  reside  on  Sun  Microsys¬ 
tems  Inc.  servers  and  match 
user  names  with  databases  or 
directories  of  entitlements  in¬ 
formation  to  determine  what 
applications  and  data  cus¬ 
tomers  can  access.  The  bank 
is  installing  four  new  servers 
in  its  data  center  to  run  the 
software  and  mirroring  them 
with  four  other  systems  in  a 
backup  facility. 

The  first  implementation  of 
the  software  is  in  the  works  for 
CIBC’s  online  retail  banking 
applications,  Urquhart  said. 
The  single  sign-on  feature  is 
due  to  be  rolled  out  in  Decem¬ 
ber  and  should  be  followed  by 
the  password  reset  capability 
next  June,  he  added. 

As  the  project  proceeds, 


CIBC  will  add  single  sign-on 
capability  for  its  PC  banking 
service  and  its  Imperial  Ser¬ 
vice,  which  is  aimed  at  high- 
end  customers.  The  Site- 
Minder  application  will  also 
be  installed  in  areas  such  as 
small  business  and  commercial 
banking,  private  banking,  cred¬ 
it  card  processing  and  broker¬ 
age  services,  Urquhart  said. 

The  software  installation 
itself  has  been  relatively  trou¬ 
ble-free,  Urquhart  said.  But 
getting  executives  at  the  differ¬ 
ent  business  units  to  agree  on 
common  security  policies  has 
been  a  bigger  challenge,  he 
added.  That  process  will  likely 
take  about  four  more  months 
to  complete,  Urquhart  said. 

“You  can  put  the  technology 
in  fairly  easily,  but  if  your  busi¬ 
nesses  are  not  in  line,  they’ll 
just  break  down  behind  the 
scenes,”  he  said.  ) 


How  Netegrity’s  SiteMinder  software  works: 


OUser  attempts 
to  access 
applications 
via  the  Web. 


PROTECTED  CORPORATE  APPLICATIONS 


HTTP  Secure 
Sockets  Layer 


User’s  credentials 
are  collected  by 
SiteMinder  agent 
installed  on  a  Web 
server. 


401k  plans 


Order  entry  Online  trading  Shipping  Retail  banking 


©User’s  profile  and  en-  v  User  is  authorized  for 
titlements  are  passed  access  to  appropriate 

to  applications.  _ applications. 


Encrypted  credentials 
are  passed  to  Site¬ 
Minder  Policy  Server 
on  a  back-end  system., 


© 


User  is  authen¬ 
ticated  against 
databases  of 
IDs  and  access 
privileges. 


USER  AND  ENTITLEMENTS  DATABASES 


Or  a  box  that 
delivers  them  instantly 
over  the  internet? 
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documents  work  in  an  internet  world. 
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Supply  Chain  Apps  Target  Complex  Orders 

Software  vendors  ready  new  tools  for 

users  working  with  multiple  suppliers 


BY  MARC  L.  SONGINI 

Supply  chain  software  vendors 
i2  Technologies  Inc.  and  Yantra 
Corp.  are  rolling  out  rival  ap¬ 
plications  designed  for  users 
who  need  to  manage  complex 
order-fulfillment  processes  in¬ 
volving  multiple  business  units 
or  suppliers. 

Dallas-based  i2  confirmed 
that  it  plans  this  week  to  an¬ 
nounce  a  new  line  of  order 
management  tools  as  part  of  an 
upgrade  of  its  flagship  supply 
chain  suite,  called  i2  Five.Two. 
The  company  declined  to  com¬ 
ment  further  on  the  plans. 


Karen  Peterson,  an  analyst 
at  Stamford,  Conn.-based  Gart¬ 
ner  Inc.,  said  i2  is  positioning 
the  new  technology  for  use 
in  integrating  multiple  order 
management  systems. 

Meanwhile,  Yantra  last  week 
released  the  latest  version  of 
its  namesake  multienterprise 
order  and  inventory  manage¬ 
ment  software. 

Yantra  Version  4.0  includes 
new  supply  chain  collabora¬ 
tion,  catalog  management  and 
workflow  visualization  fea¬ 
tures,  officials  at  the  Tewks¬ 
bury,  Mass.-based  said.  The 


new  version  of  the  software 
also  includes  embedded  appli¬ 
cation  server  software  devel¬ 
oped  by  San  Jose-based  BEA 
Systems  Inc. 

Unifying  Software 

Enterprise  resource  plan¬ 
ning  vendors  such  as  SAP  AG 
and  Oracle  Corp.  also  claim  to 
have  technology  that  offers 
order  visibility  and  dynamic 
management  capabilities  across 
supply  chains. 

But  their  products  typically 
handle  orders  for  a  single  busi¬ 
ness  unit  or  company,  said 
Chris  Newton,  an  analyst  at 
AMR  Research  Inc.  in  Boston. 
By  contrast,  the  software  de¬ 
veloped  by  Yantra  and  i2  can 
sit  between  transactional  sys¬ 


tems  and  act  in  “a  unifying  way 
to  bring  together  disparate  or¬ 
ganizations,”  Newton  said. 

APL  Direct  Logistics,  a 
third-party  logistics  provider 
in  Jacksonville,  Fla.,  is  one  of 
about  40  companies  that  have 
installed  earlier  versions  of 
Yantra’s  software.  The  applica¬ 
tions  let  APL  offer  a  wider 
range  of  services  to  potential 
corporate  customers,  said  Sally 
Miller,  director  of  IT. 

Miller  said  the  software  costs 
about  $850,000.  APL  started 
using  it  in  March,  replacing  an 
internal  system  that  didn’t 
have  alternative  sourcing  or 
back-order  management  capa¬ 
bilities.  But,  Miller  said,  her 
company  could  still  use  tools 
that  would  automate  the  calcu¬ 
lation  of  domestic  and  interna¬ 
tional  taxes  and  speed  up  the 
process  of  returning  and  ex¬ 
changing  inventory. 
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AT  A  GLANCE 


Await  Orders 

Order  management  software: 

Is  designed  to  help  users  coordinate  and 
manage  inventory  orders  through  multiple 
channels,  business  units  and  suppliers. 

Offers  benefits  such  as  cost  savings, 
reduced  order-fulfillment  times  and  faster 
supply  chain  responses  to  shifts  in  cus¬ 
tomer  demand. 


Logistics  and  transportation 
services  provider  Ryder  Sys¬ 
tem  Inc.  uses  a  mix  of  applica¬ 
tions  from  vendors  such  as 
Atlanta-based  Viewlocity  Inc. 
to  manage  “order-impacting 
events”  in  its  supply  chain,  said 
John  Wormwood,  group  man¬ 
ager  of  e-commerce  at  Miami- 
based  Ryder.  The  software 
helps  with  challenges  such  as 
order  changes  and  sourcing 
problems,  he  added.  I 
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BRIEFS 


IBM’s  Sales,  Profits 
Fall  in  Third  Quarter 

IBM  reported  a  S1.6  billion  net  profit 
for  the  third  quarter,  down  18% 
from  income  of  $1.96  billion  in  the 
same  period  last  year.  Third-quarter 
revenue  came  in  at  $20.4  billion, 
dropping  6%  from  $21.8  billion  a 
year  ago.  IBM  said  predictions  by  fi¬ 
nancial  analysts  of  a  fourth-quarter 
profit  in  the  $2.4  billion  range  ap¬ 
pear  to  be  “reasonable.” 


Chip  Shipments  Rise, 
But  Intel  Results  Off 

Despite  an  increase  in  microproces¬ 
sor  shipments,  Intel  Corp.  reported 
a  96%  year-to-year  decline  in  third- 
quarter  profits  and  a  25%  drop-off 
in  revenue.  Price  cuts  offset  the  rise 
in  chip  shipments,  said  Intel,  which 
had  net  income  of  $106  million  on 
revenue  of  $6.6  billion.  The  compa¬ 
ny  forecast  a  similar  revenue  level 
during  the  fourth  quarter. 

AT&T,  BT  Break  Up 
Joint  Venture 

AT&T  Corp.  and  London-based 
British  Telecommunications  PLC 
agreed  to  dissolve  their  Concert 
joint  venture,  which  offered  global 
networking  services  to  multinational 
companies.  AT&T  and  British  Tele¬ 
com  will  take  back  the  various  as¬ 
sets  they  each  put  into  the  venture. 
But  they  said  all  of  Concert's  con¬ 
tracts  and  service-level  agreements 
will  be  honored. 


Short  Takes 

MICROSOFT  CORP.  and  NEC  CORP. 
announced  plans  to  work  together 
to  develop  high-end  Windows 
servers  as  well  as  Web  services  that 
would  run  on  the  systems  and  uti¬ 
lize  Microsoft’s  .Net  technology. 

NEC  would  sell  the  servers. . . .  Blue 
Bell,  Pa.-based  UNISYS  CORP.  said 
it  will  eliminate  3,000  more  jobs 
and  take  other  cost-cutting  actions 
after  its  third-quarter  income  fell 
53%  from  last  year’s  level. 


Wal-Mart  Deal  Boosts 
IBM  in  Storage  Wars 


Mainframe  and  disk  array  contract 

heats  up  competition  with  EMC 


BY  LUCAS  MEARIAN 

AL-MART 

Stores  Inc.  is 
upgrading 
its  main¬ 
frames  and 
tying  IBM  disk  arrays  to  the 
machines  in  a  multimillion- 
dollar  project  that  analysts  de¬ 
scribed  as  a  big  win  in  IBM’s 
effort  to  regain  some  of  the 
storage  market  share  it  has  lost 
in  recent  years  to  now-strug¬ 
gling  EMC  Corp. 


The  project,  which  is  esti¬ 
mated  to  cost  up  to  $50  million, 
replaces  a  series  of  S/390 
mainframes  with  IBM’s  newer 
z900  systems. 

Bentonville,  Ark.-based  Wal- 
Mart  is  also  installing  IBM 
Shark  disk  arrays  with  a  total 
storage  capacity  of  50TB  to 
support  the  mainframes, 
which  run  core  business  appli¬ 
cations  such  as  invoicing, 
product  replenishment  and  the 
processing  of  credit  card  trans¬ 


actions  for  the  retail  giant’s 
4,000-plus  stores. 

IBM’s  announcement  of  the 
deal  last  week  coincided  with  a 
disclosure  by  Hopkinton, 
Mass.-based  EMC  that  it  lost 
$945  million  in  the  third  quar¬ 
ter  as  revenue  plunged  47%  on 
a  year-to-year  basis  (see  box). 

Wal-Mart  officials  declined 
to  identify  any  storage  vendors 
that  are  being  replaced  as  part 
of  the  Shark  installation. 

But  IBM  said  the  Shark  ar¬ 
rays,  known  formally  as  Enter¬ 
prise  Storage  Servers,  will  take 
over  data  center  processing 
jobs  done  previously  by  stor¬ 
age  devices  from  EMC  and 


B2B  Vendors  Take  More  Hits  as  Sales  Drop 


Rivals  look  for  new 
ways  to  improve 
software  revenue 


BY  MICHAEL  MEEHAN 

Steep  revenue  declines,  layoffs 
and  management  changes: 
That’s  the  way  it  has  been  all 
year  for  business-to-business 
software  vendors,  and  last 
week  brought  more  of  the 
same  for  three  top  rivals. 

Pleasanton,  Calif.-based 
Commerce  One  Inc.  and  Dal¬ 
las-based  i2  Technologies  Inc. 
announced  big  third-quarter 
losses  and  more  job  cuts.  Sun¬ 
nyvale,  Calif. -based  Ariba  Inc. 
named  a  new  CEO,  the  third 
person  to  hold  that  job  this 
year.  Ariba  also  said  revenue 
for  its  fourth  quarter  ended 
Sept.  30  will  be  down  sharply 
year  to  year,  though  slightly 
above  earlier  estimates. 

John  Fontanella,  an  analyst 
at  AMR  Research  Inc.  in 
Boston,  said  B2B  vendors  are 
being  squeezed  as  SAP  AG  and 
other  makers  of  back-office 
software  build  similar  func¬ 


tionality  into  their  applica¬ 
tions.  In  addition,  he  said, 
many  users  are  looking  to  buy 
individual  business-to-busi- 
ness  modules  instead  of  full 
product  suites. 

Commerce  One  CEO  Mark 
Hoffman  vowed  to  continue 
investing  aggressively  in  col¬ 
laborative  commerce  applica¬ 
tions.  But  SAP  will  take  over 
much  of  Commerce  One’s 
sales,  Hoffman  said,  adding 


JUST  THE  FACTS 


Three  of 
A  Kind 

Last  week’s  announcements 
by  B2B  vendors  included  the 
following: 

m  Commerce  One  reported  a  $119 
million  third-quarter  loss  and  said  it 
will  cut  1,300  of  its  2,800  workers 
through  layoffs  or  business  spin-offs. 

■  12  Technologies  reported  a  $5.5 
billion  net  loss  for  the  third  quarter  and 
announced  a  new  round  of  layoffs  that 
will  affect  about  1,000  employees. 

■  Ariba  named  its  third  CEO  this  year 
and  disclosed  that  its  fiscal  fourth- 
quarter  revenue  will  be  less  than  half 
the  year-earlier  total. 


that  his  company’s  software  is 
frequently  being  bundled  with 
SAP’s  business  applications. 

In  June,  SAP  upped  its  own¬ 
ership  stake  in  Commerce  One 
from  4%  to  20%  by  investing 
$225  million  in  the  struggling 
company.  Fontanella  said  he 
doesn’t  expect  SAP  to  buy  out 
its  partner  at  this  point.  But 
working  closely  with  SAP  is  a 
good  strategy  for  Commerce 
One  to  pursue,  he  said. 

12,  which  also  sells  supply 
chain  applications,  is  looking 
for  a  boost  from  a  new  release 
called  i2  Five.Two,  which  is 
due  out  this  week.  But  big  sup¬ 
ply  chain  projects  “are  out  of 
vogue  now,  and  i2  doesn’t  have 
much  else  to  fall  back  on,”  said 
Joshua  Greenbaum,  an  analyst 
at  Enterprise  Applications 
Consulting  in  Daly  City,  Calif. 

Ariba  is  pinning  its  hopes  for 
a  rebound  on  what  it  calls 
“spend  management”  products 
aimed  at  helping  users  rein  in 
expenses.  New  CEO  Robert 
Calderoni  even  tried  to  dis¬ 
tance  Ariba  from  the  term 
business-to-business,  saying 
it’s  now  focused  on  corporate 
spending  practices.  > 


►Reported  a  $945  million 
third-quarter  loss  on  rev¬ 
enue  of  $1.2  billion,  down 
from  year-earlier  revenue 
of  $2.3  billion. 

►Took  an  $825  million  pre-  ! 
tax  restructuring  charge  to 
pay  for  layoffs,  facility 
closings  and  inventory 
write-downs. 

. .  j| 

►  Increased  the  number  of 

employees  being  let  go 
under  a  cutback  program 
announced  last  month 
from  2,400  people  to  4,000. 


Santa  Clara,  Calif.-based  Hi¬ 
tachi  Data  Systems  Corp. 

Wal-Mart’s  decision  is  a  sign 
that  IBM  has  overcome  earlier 
performance  problems  with 
the  Shark  array,  analysts  said. 

“Early  information  we  were 
getting  from  the  field  was  that 
Shark’s  performance  was  hor¬ 
rible  and  it  couldn’t  grow  ca¬ 
pacity  beyond  a  certain  point,” 
said  Arun  Taneja,  an  analyst  at 
The  Enterprise  Storage  Group 
Inc.  in  Milford,  Mass.  But  those 
issues  now  appear  to  have 
been  ironed  out,  he  said. 

Mike  Kahn,  an  analyst  at  The 
Clipper  Group  Inc.  in  Welles¬ 
ley,  Mass.,  said  the  Wal-Mart 
contract  significantly  turns  up 
the  heat  on  EMC. 

Last  year,  EMC  had  19.1%  of 
the  overall  storage  market,  fol¬ 
lowed  by  Compaq  Computer 
Corp.  with  18.7%  and  IBM  with 
13.3%,  according  to  Gartner 
Inc.’s  San  Jose-based  Data- 
quest  Inc.  unit. 

But  “without  any  question, 
EMC  has  more  competition  to¬ 
day,  and  their  competition  is 
getting  stronger,”  said  Data- 
quest  analyst  Roger  Cox. 

Despite  IBM’s  mainframe 
storage  win,  EMC  said  Wal- 
Mart  is  still  a  big  user  of  its 
disk  arrays.  EMC  said  its  prod¬ 
ucts  have  been  deployed 
across  multiple  server  plat¬ 
forms  at  Wal-Mart,  including 
Unix  and  Windows  NT  sys¬ 
tems  tied  together  via  a  net¬ 
worked  storage  architecture.  I 


Introducing  the  Sun  Fire“15K?  the  mainframe-class  server 
for  today’s  networked  data  center. 


Go  beyond  the  mainframe.  Way  beyond. 

Mainframes  have  been  the  standard  in  the  glasshouse  since  the 
'70s.  But  with  their  complexity,  closed  technology  and  high  main¬ 
tenance  costs,  mainframes  are  simply  not  designed  for  the  modern 
networked  data  center.  The  Sun  Fire™  15K  server,  on  the  other 
hand,  has  the  power  to  run  the  most  demanding  applications- 
at  a  fraction  of  the  cost  of  a  UNIX®  system  or  mainframe. 


Ah,  the  joy  of  consolidation. 

In  fact,  the  Sun  Fire  15K  server  is  so  powerful,  you  can  consolidate 
multiple  servers  and  rehost  mainframe  applications,  as  well 
as  deploy  new  mission-critical  applications  in  an  open  environment. 
And  unlike  a  mainframe,  the  Sun  Fire  15K  server  easily  integrates 
into  your  existing  architecture.  The  Sun  Fire  15K  server  has  complete 
end-to-end  system  compatibility  with  the  Solaris™/SPARC™ 
architecture,  so  you  use  the  same  tools,  applications,  administration 
and  resources  to  deploy  and  manage  it.  No  recoding,  no  retraining 
and  no  expensive  consultants  to  come  in  and  “manage"  it  for  you. 


A  revolutionary  concept  in  data  centers: 
reduced  costs. 

The  result  of  all  this?  A  significantly  lower  total  cost  of  ownership. 
In  the  end,  by  incorporating  the  new  Sun  Fire  15K  server  into  your 
existing  architecture,  you  can  reduce  your  data  center’s  complexity, 
take  control  and  cut  your  costs.  So  take  the  first  step  toward 
liberating  your  data  center-and  your  bottom  line,  www.sun.com 


Product  specifications  (the  rocket  science): 

•  106  CPUs -the  largest  in  a  single  cabinet 

•  1/2  terabyte  memory  -  enough  to  run  a  database  in  main  memory 

•  18  domains -for  the  utmost  in  balanced  workloads 

■  4  petabytes  of  storage  -  20x  the  Library  of  Congress 

■  6,400  mainframe  MIPS-3x  the  IBM  z900 

•  5th-generation  fault-isolated  dynamic  system  domains 

•  Sun"  Fireplane  interconnect- maximum  app  performance 

•  Uniboard  design  -  swappable  CPU  and  memory  board 


Independent  software  vendor  support: 

Sun  offers  software  developers  an  unparalleled  open 
and  compatible  architecture  in  which  to  develop 
and  deploy  their  solutions.  This  single  integrated 
system  architecture  allows  customers  to  protect  their 
investments,  leverage  their  existing  skill  sets  and 
staff,  and  increase  their  R0I.  It’s  the  reason  ISVs 
like  BEA  Systems,  i2,  J.D.  Edwards,  Oracle  and 
VERITAS  partner  with  Sun. 
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Don’t  Dis  Storage 


INFRASTRUCTURE  is  cool  again.  The  back  end  is  back  in  vogue. 
And  data  storage  rivals  security  as  a  hot  tech  topic  today. 

Unlike  the  past  few  waves  of  technohype,  this  is  no  Y2k  call  to 
arms.  It’s  no  strategic  e-commerce  gamble,  either.  Your  senior 


business  managers  are  never  going  to 
care  about  storage.  As  one  IT  execu¬ 
tive  said  to  me  last  week,  “If  you’re 
talking  to  senior  management  about 
storage,  you’re  having  the  wrong  con¬ 
versation.” 

The  only  thing  that  will  even  re¬ 
motely  interest  your  CEO  is  the  price 
tag  —  and  how  it  relates  to  a  project’s 
business  benefits. 

That  doesn’t  let  you  off  the  hook,  as 
was  evident  in  our  Storage  Knowledge 
Center  special  report  in  last  week’s  is¬ 
sue  (also  online  at  Computers  or  Id- 
.com).  All  the  familiar  pitfalls  were 
covered:  overpriced  software,  incompatible  tech¬ 
nologies  and  conflicting  expert  advice. 

One  of  our  stories  (“Oops!”  by  Sami  Lais)  de¬ 
tailed  all  the  storage  mistakes  that  IT  can  stumble 
into  and  suggested  ways  to  avoid  them.  It  was 
quite  a  daunting  list.  You  can  get  too  bogged 
down  in  the  technology  and  forget  business  re¬ 
quirements  before  you  buy.  You  can  overlook  net¬ 
work  traffic  needs.  You  can  get  too  focused  on 
online  storage  and  neglect  your  off-line  backup 


strategy.  You  can  fumble  the  complex 
job  of  integration  and  end  up  with 
outsourcers  running  your  life. 

Or  you  can  seize  the  storage  day 
and  take  control. 

“Our  biggest  issue  right  now  is  deal¬ 
ing  with  vendors  who  are  going 
around  central  procurement  and  get¬ 
ting  into  the  business  units.  We’re  go¬ 
ing  to  stop  that,”  said  George  Vrabel,  a 
senior  IT  vice  president  at  Bank  of 
America.  The  bank  is  expecting  a  25% 
growth  rate  in  its  massive  storage  ca¬ 
pacity  this  year.  Yet  even  a  giant  like 
Bank  of  America  encounters  the  same 
problems  every  company  does  on  the  storage 
frontier:  product  interoperability  snafus,  lack  of 
maturity  in  distributed  management  tools  and  a 
struggle  to  make  the  cost/benefit  analysis  work. 

Perhaps  that’s  cold  comfort,  knowing  that 
everybody’s  in  the  same  boat.  But  remember  that 
the  deeply  technical  nature  of  networked  storage 
makes  it  an  IT  infrastructure  play  from  start  to 
finish.  So  the  next  time  you  bump  into  the  CEO, 
ask  about  his  golf  game.  ► 
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PIMM  FOX 

A  Congressional 
Boost  for  IT? 

IT’S  TIME  to  shake  that  IT  depression. 
If  you’ve  been  denied  budget  ap¬ 
proval  for  new  equipment  or  an  oper¬ 
ating  system  shift,  now  is  a  good  time  to 
dust  off  those  proposals.  Washington 
lawmakers  are  debating  changes  in  the  deprecia¬ 
tion  schedule  for  IT  that  could  cut  the  cost  of 
buying  new  hardware  and  software. 

When  Congress  first  set  the  five-year  deprecia¬ 
tion  schedule  for  IT  in  1981,  which  it  accelerated 
slightly  in  1986,  IBM  had  just  shipped  its  Personal 
Computer  with  16KB  of  RAM,  a  4.77-MHz  8088 
processor  and  a  cassette  interface,  all  for  $3,000. 
The  problem?  According  to 
today’s  tax  rules,  it  would 
take  a  company  at  least  five 
years  to  write  off  that  ma¬ 
chine  —  and  every  PC  built 
since  then. 

IT  may  have  changed 
from  the  days  of  the  IBM 
PC,  but  the  tax  code  re¬ 
mains  stuck  in  a  time  warp. 

Fortuitously,  as  part  of 
President  Bush’s  economic 
stimulus  package,  there’s  a 
chance  businesses  could 
write  off  purchases  of  computers,  software,  high- 
tech  equipment  and  even  cell  phones  on  an  accel¬ 
erated  basis  —  say  three  years  max. 

In  a  mid-October  meeting  with  House  Ways 
and  Means  Committee  Chairman  Bill  Thomas  (R- 
Calif.),  Harris  Miller,  president  of  the  Information 
Technology  Association  of  America,  called  for  ac¬ 
celerated  depreciation  of  computers,  software, 
telecommunications  and  other  equipment  “at  a 
rate  that  reflects  the  modern  business  environ¬ 
ment.”  Miller  said  depreciation  rules  are  out  of 
line  with  reality,  since  hardware  and  software 
have  shelf  lives  seemingly  only  slightly  longer 
than  mayflies.  “If  we  get  a  more  realistic  depreci¬ 
ation  schedule  that  reflects  the  useful  life  of  prod¬ 
ucts,  purchasers  will  move  more  quickly,  giving  a 
boost  to  the  IT  industry,”  he  said. 

The  prognosis  for  success  is  good.  Particularly 
if  you  e-mail  your  local  congressman  to  support 
this  tax  code  change. 

But  a  nagging  question  remains:  How  receptive 
are  IT  buyers  to  new  purchases? 

The  answer  is  surprising. 

According  to  an  AFCOM  Data  Center  Institute 
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poll  conducted  after  Sept.  11,  an  overwhelming 
94%  of  422  senior  data  center  managers  surveyed 
said  the  terrorist  attacks  haven’t  caused  them  to 
cut  spending.  In  addition,  53%  —  compared  with 
67%  in  a  first-quarter  poll  —  of  the  largest  data 
centers  report  IT  purchasing  plans  remain  the 
same  or  are  increasing  for  the  next  12  months. 

Despite  the  combination  of  gloomy  economic 
reports  and  war-related  news,  almost  half  of  the 
IT  executives  —  48%  —  said  changes  in  the  econ¬ 
omy  had  no  effect  on  their  application  implemen¬ 
tation  plans,  while  16%  said  they  are  accelerating 
their  implementations. 

With  a  tax  code  more  in  sync  with  Moore’s  Law 
and  confident  IT  buyers,  we  might  shrug  off  the 
worst  of  the  high-tech  blues.  > 

MICHAEL  GARTENBERG 

Why  Ubiquitous 
Computing  Will 
Supplant  the  PC 

THE  PC  HAS  maintained  a  domi¬ 
nant  position  on  the  desktop  and 
achieved  a  level  of  nonsubsti- 
tutable  infrastructure,  making  it  difficult, 
if  not  impossible,  to  replace.  Wintel 
systems  benefit  from  the  image  of  being  the  safe 
choice  in  many  market  sectors,  with  the  result  be¬ 
ing  a  powerful  positive  feedback  loop.  Despite 
this,  it’s  inevitable  that  the  PC  will  be  replaced, 
and  IT  departments  need  to  start  thinking  about 
what  might  come  tomorrow.  To  understand  the 

shift  that  will  occur,  under¬ 
stand  that  nearly  all  tech¬ 
nology  shifts  take  place 
over  time  and  go  through 
the  following  five  phases: 

1.  Competing  standards  are 
introduced. 

2.  Market  forces  lead  to  one 
standard  emerging  as  non- 
substitutable  infrastructure. 
3.  The  prevailing  standard 
is  attacked  by  pseudochal¬ 
lengers  but  isn’t  displaced 
because  the  challengers 
don’t  offer  enough  mean¬ 
ingful  differentiation  or 
have  flaws  different  from  the  technology  they  try 
to  displace.  (However,  pseudochallengers  often 
have  enough  value  to  remain  viable  alternatives.) 
4.  The  standard  re-emerges  stronger  than  before 
and  appears  invincible. 

5.  A  new  and  better  technology  emerges  and  dis¬ 
places  the  existing  standard. 

This  cycle  has  held  true  for  a  variety  of  techni- 
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cal  innovations,  from  the  development  of  refrig¬ 
eration  to  audio  technologies.  The  Wintel  PC  is 
now  going  through  stages  3  and  4.  It  has  achieved 
dominance  and  faces  a  host  of  pseudochallengers. 
Throughout  the  years,  these  challenges  have  in¬ 
cluded  the  Mac  OS,  OS/2,  Linux,  Java  and  net¬ 
work  computing.  But  none  was  able  to  cross  the 
gap  that  leads  into  the  fifth  stage  by  providing  a 
clear  and  demonstrable  difference.  Despite  being 
unable  to  displace  the  Wintel  PC,  many  of  the 
challengers  provide  enough  value  to  remain  vi¬ 
able  alternatives  in  certain  markets. 

To  supplant  existing  technology,  a  new  technol¬ 
ogy  must  meet  the  following  three  criteria: 

1.  It  must  offer  visible  and  demonstrable  value 
and  differentiation  that  end  users  can  directly  ex¬ 
ploit.  One  reason  the  CD  replaced  the  LP  so 
quickly  was  that  end  users  were  able  to  clearly 
hear  the  difference  between  the  two  technologies. 

2.  It  must  offer  economic  benefit  to  software  ven¬ 
dors.  In  the  CD  market,  software  vendors  —  in 
this  case  music  companies  —  had  a  clear  benefit 
to  shift  to  the  new  format  since  the  retail  price 


they  could  charge  for  a  CD  was  much  higher  than 
that  of  an  LP  or  cassette  and  has  remained  so. 

3.  It  must  offer  clear  economic  benefit  to  hard¬ 
ware  vendors.  If  conditions  1  and  2  are  met,  hard¬ 
ware  vendors  have  a  strong  incentive  to  build 
new  systems  that  will  take  advantage  of  the  new 
technology  and  drive  upgrades.  CD  hardware 
vendors  were  behind  the  new  audio  technology 
and  had  no  fears  of  systems  cannibalizing  sales. 

Today,  we’re  seeing  the  rise  of  a  technology 
that  meets  these  criteria:  ubiquitous  computing. 
Ubiquitous  computing  is  the  ability  to  access  use¬ 
ful  digital  content,  both  personal  and  business- 
related,  through  a  variety  of  digital  information 
devices.  By  2005,  it  will  evolve  and  ultimately  dis¬ 
place  the  PC  on  the  desktop. 

Three  core  components  will  enable  ubiquitous 
computing:  a  multitude  of  information  devices; 
connectivity  between  personal-area  networks, 
wireless  LANs  and  WANs;  and  Web-based  ser¬ 
vices  that  provide  the  software  infrastructure.  In 
future  columns,  I’ll  discuss  each  of  these  compo¬ 
nents  and  explore  how  the  PC  will  evolve.  I 
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MCSEs  Sound  Off 

TT’S  about  time  Mi¬ 
crosoft  woke  up  to 
the  reality  that  many 
weren’t  going  to  play  the 
certification  game  on  its 
terms  anymore  [“Users 
Force  Microsoft’s  Hand,” 
Page  One,  Oct.  15].  I  de¬ 
cided  early  on  that  I 
wouldn’t  recertify  under 
Windows  2000.  Now  that 
the  pressure  is  off,  I  may 
even  recertify  after  all. 
Lyle  Cashman 
Network  design  engineer 
Gerber  Technology 
Tolland,  Conn. 

While  this  an¬ 
nouncement  is 
good  news, 

I’m  still  considerably 
ticked  at  Microsoft  for 
making  the  capricious 
decision  that  individuals 
who  had  used  the  Win¬ 
dows  95  or  98  tests  as 
part  of  their  certification 
weren’t  worthy  to  take 
the  accelerated  test  to 
update  their  MCSE  to 
Windows  2000  status.  It 
convinced  me  to  get  off 
the  vendor  certification 
treadmill  and  seek  indus¬ 
try-standard  certs;  I 


passed  my  CISSP  test 
last  February.  Windows 
server  platforms  are  my 
area  of  expertise,  partic¬ 
ularly  in  the  Internet-ex- 
posed  environment.  Nat¬ 
urally,  I  have  extended 
my  knowledge  to  Win¬ 
dows  2000. 1  suspect  I’ll 
eventually  seek  further 
certifications  from  Mi¬ 
crosoft,  as  I  know  these 
are  HR  check  boxes,  but 
it  won’t  happen  without 
considerable  muttering 
under  my  breath. 

Dave  Schulhoff 
El  Dorado  Hills,  Calif. 
dschulhoff@compuserve.com 

This  really  ticks 
me  off.  I  was  in  a 
one-year  course 
aimed  toward  the  MCSE 
NT  certification  when 
Microsoft  announced  it 
was  retiring  the  required 
test  to  become  MCSE- 
certified  in  NT  4.0. 1  fin¬ 
ished  the  remaining 
courses  mainly  for  my 
own  satisfaction  and  be¬ 
cause  I  had  already  in¬ 
vested  over  $1,000.  Now, 
10  months  later,  Micro¬ 
soft  announces  it  will 
still  recognize  the  NT 
4.0  cert.  Ten  months  ago, 


not  all  the  tests  were  re¬ 
tired  yet  and  I  could  have 
at  least  become  an  MCP. 

Jan  W.  Saurbaugh 

U.S.  Coast  Guard 
Baltimore 


Mown  on  Uptime 

VISA’S  98  minutes 
of  downtime  in  12 
years  calculates 
to  99.9984%  uptime  on 
my  Excel  spreadsheet. 
Impressive,  but  not  five 
9s  [“When  Five  9s  Aren’t 
Enough,”  Technology, 
Oct.  8],  But  given  the 
arithmetic  on  some  cred¬ 
it  card  bills  . . .  (This  was 
a  really  good  and  infor¬ 
mative  article;  I  just 
couldn’t  resist.) 

Richard  Eiswirth 
Raleigh,  N.C. 


Update  Thyself 

IN  A  sept.  24  interview 
[“Resolving  Windows 
Insecurities,”  Tech¬ 
nology,  Sept.  24],  Micro¬ 
soft’s  Steve  Lipner’s  gen¬ 
eral  tone  seemed  to  say, 
“It’s  up  to  you  to  make 
your  PC  secure,”  but  his 
insistence  that  users  rely 
on  the  Windowsupdate.- 


microsoft.com  site  had 
me  in  stitches.  Not  five 
minutes  before  reading 
this  article,  I  had  tried  to 
open  this  Web  site  and 
got  a  runtime  error,  “204: 
HomeMenu  not  de¬ 
fined.”  I  use  Internet  Ex¬ 
plorer  5.5,  Service  Pack  2, 
so  I  feel  I  am  relatively 
up-to-date.  How  is  the 
general  consumer  sup¬ 
posed  to  keep  his  PC  up- 
to-date  when  Microsoft’s 
own  site  to  accomplish 
this  doesn’t  work? 

Jim  Gilbert 
Consultant 
Ciber  Inc. 

St.  Louis 

COMPUTERWORLD  welcomes 
comments  from  its  readers. 
Letters  will  be  edited  for  brevity 
and  clarity.  They  should  be  ad¬ 
dressed  to  Jamie  Eckle,  letters 
editor,  Computerworld,  P0  Box 
9171, 500  Old  Connecticut  Path. 
Framingham,  Mass.  01701. 

Fax:  (508)  879-4843.  Internet: 
letters@computerworld.com. 
Include  an  address  and  phone 
number  for  immediate  verification. 
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Web  Hosting 

As  e-business  merges  into  the  corporate  mainstream, 
enterprises  seek  more  robust  management  capabili¬ 
ties  from  hosting  service  providers 
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ARN  ABOUT  THE  EVOLVING  ROLE  OF  THE 
PLICATION  SERVER  IN  ENABLING  BUSINESS  ON 

e  Internet  and  why  enterprises  today 

E  SEEKING  MORE  ROBUST  MANAGEMENT 
LABILITIES  FROM  HOSTING  SERVICE 
ovtDERS.  This  stand-alone  White  Paper 


LI,£E$VE  AS  A  VALUABLE  RESOURCE  FOR  THE 

PROFESSIONAL  LOOKING  TO  MERGE  E-BUSI- 

•A' A  W 

SS  INTO  THE  CORPORATE  MAINSTREAM. 


ulN  THE  DOT-COM  BOOM  DAYS,  THE  INTERNET  WAS  SEEN 
AS  A  BUSINESS  MODEL  IN  AND  OF  ITSELF.  HUNDREDS  OF 
NOW- DEFUNCT  COMPANIES  PLANNED  TO  USE  THE 

Internet  to  sell  all  manner  of  items,  including 

TOYS,  PET  FOOD,  FURNITURE  AND  MUSIC.  THE 

Internet  was  supposed  to  change  everything.” 

“As  WE  ALL  KNOW,  THIS  STORY  DID  NOT  HAVE  A  HAPPY 
ENDING.  BUT  THE  BRICK  AND-MORTARS  DID  LEARN 
THAT  THE  POTENTIAL  OF  THE  INTERNET  AS  A  BUSINESS 
ENABLEMENT  MEDIUM  HAD  YET  TO  BE  TAPPED. 

Therefore,  the  end  of  the  dot-com  era  did  not 

MEAN  THE  END  OF  E-BUSINESS.  RATHER,  WE  ARE  NOW 
ENTERING  A  NEW  ERA  IN  WHICH  TRUE  “BUSINESS”  IS 
BEING  PUT  BACK  INTO  “E-BUSINESS.” 

—  Melanie  Posey, 
Program  Manager  of  Web  Hosting  Services,  and 

Courtney  Munroe, 
VP  of  Telecom  &  IP  Services 
International  Data  C.orp. 
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The  Economics  of 
Storage  Strategy 

Even  in  today's  tough  economy,  creating  and  executing 
a  comprehensive  storage  strategy  can  mean  competitive 
advantage  and  significant  financial  gain 
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SPECIAL  ADVERTISING  SUPPLEMENT 


Add  storage  and  content  without  adding  more  racks.  With  help  from  DataCore.  Our  SANsymphony’“  software  virtualizes  storage,  creating  shared 
pools  from  any  networked  assets.  So  you  can  use  storage  from  one  server  to  alleviate  the  growing  pains  of  another.  For  more  on  virtualization, 
read  our  free  white  paper  at  www.datacore.com/click.  After  all,  the  best  way  to  solve  your  storage  problem  is  to  keep  it  from  ever  becoming  one. 
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The  Economics  of  a 
Storage  Strategy 

Even  in  today’s  tough  economy  creating  and  executing 
a  comprehensive  storage  strategy  can  mean  competitive 
advantage  and  significant  financial  gain 


Some  believe  that  making  a  storage  acquisi¬ 
tion  should  be  a  simple  decision  —  if  you 
need  additional  capacity,  you  merely  buy 
more.  When  economic  times  are  tough,  the 
purchasing  is  deferred  and  everyone  has  to  get  by. 


This  is  bad  reasoning  and  an 
example  of  poor  business  under- 
standing.  First,  storage  acquisition 
needs  to  be  part  of  a  larger  storage 
strategy.  Second,  the  economics  of  the 
acquisition  are  part  of  that  strategy 
and  should  be  based  on  a  sound  busi¬ 
ness  decision 
regardless  of  the 
economic  climate. 
In  fact,  the  storage 
strategy  should 
demonstrate  the 
positive  contribu 
tion  to  the  corpo¬ 
rate  economic  con 
dition.  The  issue  comes  down  to  con¬ 
vincing  executives  of  the  importance 
of  having  a  storage  strategy,  and  to 
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making  the  correct  economic  deci¬ 
sions. 

Why  is  storage  so  important  right 
now?  There  are  several  reasons.  First, 
there’s  a  significant  financial  invest¬ 
ment  in  storage.  The  size  of  that 
investment  is  being  driven  by  the 
growth  requirement  in  storing  data, 
and  is  a  massive  line  item  in  most 
organizations’  expenditures. 

Also,  the  protection  and  availabili¬ 
ty  of  data  are  strategically  important 
to  a  company.  The  data  is  important 
to  the  day-to-day  operations,  of 
course;  in  addition,  using  derived 
information  as  a  competitive  business 
advantage  is  vital.  Data  is  vital  to  a 
business,  and  storage  and  retrieval  are 
considered  basic  operational  require- 


Abstract 

Storing  and  accessing  data  is  a 
necessity  in  today's  business  environ¬ 
ment.  The  continued  growth  of  corpo¬ 
rate  data  has  made  it  extremely 
important  to  have  a  comprehensive 
storage  strategy.  The  good  news  is 
that  even  in  today's  tough  economy, 
executing  that  strategy  can  mean  an 
investment  in  technology  that  has  the 
potential  for  significant  financial  gains 
for  a  company. 

This  white  paper  will  help  you 
understand  the  business  requirements 
necessary  for  developing  a  storage 
strategy  that  is  a  sound  business 
practice  with  economic  gains  to  be 
realized. 


ments  for  all  businesses.  The  criticali¬ 
ty  of  storage  in  normal  business  oper 
ation  warrants  having  a  storage  strat¬ 
egy.  A  storage  strategy  is  much  more 
than  an  acquisition  strategy.  It  must 
encompass  all  aspects  of  storing  and 
retrieving  data: 

•  The  connectivity  methodology 
for  computing  elements  to  have 
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access  to  data. 

•  The  security  and  integrity 
required  for  corporate  data. 

•  The  performance  demands  for 
data  access  in  processing. 

•  The  capacity  scaling  require 
ments  to  support  future  business 
demands. 

•  A  set  of  guidelines  for  dealing 
with  storage  vendors,  including  stor¬ 
age  management  software. 

•  A  rolling  multi  year  plan  for 
adoption  of  new7  technologies  that 
have  economic  benefit. 

•  A  plan  for  archiving  and  retain' 
ing  electronic  records  used  for  legal 
compliance. 

Implicit  in  all  storage  issues  are 
the  economics  involved.  Multiple  fac¬ 
tors  of  concern  are  usually  grouped  in 
a  Total  Cost  of  Ownership  (TCO) 
model  that  includes  acquisition  cost, 
administration,  support,  environ 
ment,  etc.  This  is  sometimes  confused 
with  Return  On  Investment  (ROI), 
wiiich  is  a  comparative  model  that 
demonstrates  when  an  investment 
has  paid  for  itself  in  cost  savings. 
Using  an  ROI  model  can  demonstrate 
the  very  straightforward  value  in  a 
particular  decision,  but  a  long- term 
storage  strategy  requires  an  extended 
horizon  that  looks  at  overall  business 
issues. 

To  examine  the  economics  in  a 
storage  strategy,  the  dynamics  of 
w'hat  is  happening  in  the  storage  dis 
cipline  must  be  understood.  First  is  a 
thorough  understanding  of  what’s 
driving  the  demand  for  storage,  and 
the  implications  that  brings.  Business 
issues  that  are  part  of  the  grow’th 
requirement  must  be  considered  as 
well.  There  are  many  solutions  in  the 


market  today,  with  many  more  being 
promised  by  high-profile  vendors. 
How  these  solutions  address  prob¬ 
lems  and  how'  they  will  change  over 
time  are  factors  in  developing  a  strat¬ 
egy.  Finally,  the  hard  economics  of 
executing  a  storage  strategy  must  be 
researched.  Strategic  storage  deci¬ 
sions  have  long-term  repercussions 
and  can  have  impact  (both  positive 
and  negative)  on  companies  and 
careers. 

Addressing  growth 

Customers  have  a  major  problem 
with  storage  today:  the  growth  of 
data  that  needs  to  be  stored  and 
retrieved.  Today,  most  IT  organiza¬ 
tions  are  experiencing  phenomenal 
growth  of  storage  needs,  often  dou¬ 
bling  capacity  each  year.  There  are 


many  reasons  for  this  growth,  includ¬ 
ing  the  following: 

•  More  applications  are  being 
brought  online;  this  can  be  thought  of 
as  normal  business  activity. 

•  The  growth  of  e-commerce  is 
impacting  storage  capacity  Most  e- 
business  initiatives  in  corporations 
are  net  additions  to  the  storage 
requirements  beyond  existing  busi¬ 
ness  data  processing.  The  amount  of 
storage  needed  to  support  e-business 
has  been  staggering  to  date.  The 
expansion  of  e  business  is  expected 
to  continue  for  several  years,  fueling 
the  continued  growth  of  storage  in 
that  area. 

Just  a  few7  years  ago,  businesses 
typically  kept  three  months  of  data 
online  and  immediately  accessible. 
Now;  that  number  is  averaging  seven 


Figure  1: 

Storage  Growth  Industry  Estimates 

Worldwide  Disk  Storage  Systems  Shipments 


Year 
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years’  worth  of  data.  Having  data 
immediately  accessible  addresses 
both  business  issues  and  potential 
legal  requirements.  From  a  business 
standpoint,  the  time  required  to 
access  data  may  represent  an 
informed  decision  being  made  in  a 
timely  manner,  a  customer  being  sat 
isfied  (or  lost),  and  money  expended 
while  waiting  for  information. 
Certain  legal  implications  exist 
regarding  retention  of  data  with  a 
“reasonable”  availability,  meaning 
retrieval  time. 

Dramatic  growth 

In  the  last  five  years,  the  amount  of 
the  world’s  information  being  stored 
electronically  has  risen  from  1%  to 
10%.  This  is  a  dramatic  change,  and  a 
portent  of  further  change;  simply 
reaching  the  20%  level  will  require  a 


quantum  leap  in  storage  capacity. 
Figure  1  shows  the  growth  of  storage 
based  on  disk  drive  shipments,  with  a 
projection  for  the  future. 

As  if  that  weren’t  dramatic 
enough,  storage  growth  is  com- 
pounding.  As  an  example,  consider  a 
data  center  that’s  adding  1  terabyte  of 
storage  this  year  in  order  to  meet 
demands.  If  growth  continues  as 
expected  for  the  next  five  years,  that 
data  center  will  be  adding  32  ter- 
abytes  in  the  fifth  year.  Adding  the 
capacity  itself  is  just  one  of  many 
issues;  others  include  environmental 
concerns,  physical  space,  and  connec¬ 
tivity  infrastructure. 

But  the  Number  One  issue  with 
storage  is  the  cost  of  administration. 
With  the  growth  in  storage,  the  cost 
of  administration  is  scaling  linearly.  A 
study  has  shown  that  the  cost  of 
managing  1  terabyte  of  data  is  500% 
to  700%  that  of  purchasing  it.  The 
reason  for  high  administrative  costs  is 
that  there  are  almost  no  consistent, 
multi-platform  tools.  Indeed,  storage 
is  typically  administered  on  an  indi¬ 
vidual  device  basis,  where  different 
tools  are  used  for  each  type  of  device. 
There  is  no  overall  tool  set,  and 
trained  administrators  are  required. 
Today,  there’s  a  severe  shortage  of 
trained  administrators  —  despite 
corporate  downsizing. 

The  cost  of  administration  varies 
depending  on  where  storage  is 
administered.  Systems  that  are  dis¬ 
tributed  are  administered  independ¬ 
ently  and,  typically,  by  personnel  who 
are  not  storage  professionals  with  the 
training  and  tools  that  may  be  neces¬ 
sary  to  be  efficient.  This  inherently 
costs  more  than  centrally  located  sys¬ 


tems  with  a  professional  staff. 
Systems  that  have  a  high  degree  of 
integration  (meaning  they  are  not 
independent  systems  physically 
located  together)  can  be  more  effi¬ 
ciently  administered.  This  equates  to 
a  metric  that  is  actually  relatively 
simple  to  understand:  the  amount  of 
storage  an  administrator  can  manage, 
or  Gigabytes  per  Administrator. 

Reaching  the  limit 

Considering  the  demand  for 
growth  in  storage,  without  some 
commensurate  change  in  the  amount 
of  storage  an  administrator  can  man¬ 
age,  the  ability  to  find  (and  hire) 
administrators  is  a  limiting  factor  on 
satisfying  storage  demand.  Many 
storage  management  solutions  that 
are  being  delivered  or  promised  are 
focused  on  increasing  the  amount  of 


There's  no  question  that 
today,  most  IT  organiza¬ 
tions  are  experiencing  phe¬ 
nomenal  growth  in  their 
storage  needs,  often  dou¬ 
bling  capacity  each  year. 
The  principal  reason:  The 
amount  of  storage  needed 
to  support  e-commerce 
and  e-business  has  proven 
staggering. 
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BrightStor™  Storage  Management  Solutions 


For  years,  storage  management  has  been  an  ever-increasing  cost,  not  a  source  of  potential 
opportunity.  But  that's  all  about  to  change.  Because  we've  created  BrightStor,  the  most 
comprehensive  suite  of  end-to-end  storage  management  solutions  on  the  market.  BrightStor 
lets  you  leverage  your  resources  and  data  across  your  entire  enterprise,  regardless  of 
platform  or  protocol.  In  fact,  BrightStor  is  the  only  suite  of  solutions  that  supports  all 
three  industry  models  — DAS,  NAS  and  SAN  — cross-platform.  Which  means  you  can  look 
at  your  eBusiness  needs  as  a  whole,  not  piece  by  piece.  So  you  can  optimize  your  resources 
across  your  entire  storage  infrastructure.  And,  most  importantly,  you  can  do  more  than  just 
store  information.  You  can  actually  use  it. 
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With  the  skyrocketing  growth 
in  demand  for  storage,  the 
ability  to  find  and  hire  admin¬ 
istrators  has  become  a  limit¬ 
ing  factor.  Many  of  today's 
storage  management  solu¬ 
tions  (as  well  as  tomorrow's) 
promise  to  address  this  by 
increasing  the  amount  of 
storage  that  can  be  handled 
by  a  given  administrator. 


storage  that  can  be  managed  per 
administrator;  it’s  the  dominant  faC' 
tor  in  the  economics  of  storage 
growth,  and  is  a  focus  item  for  nearly 
every  vendor  company.  This  will  be 
explored  more  in  a  later  section. 

If  the  ability  to  store  and  access 
data  is  impeded  for  some  reason,  such 
as  an  insufficient  number  of  adminis¬ 
trators,  there  are  major  implications 
for  the  business  itself.  The  business 
imperatives  enabled  by  storage  have 
some  very  visible  effects  on  the  com¬ 
pany  financial  position:  if  storage 
can’t  be  deployed  in  a  timely  fashion, 
new  or  additional  business  will  have 
to  wait,  which  will  negatively  affect 
revenue.  Customers  may  be  lost;  and 
opportunities  might  not  appear  in  the 
same  timeframe.  Adding  storage  is 
not  as  simple  as  buying  more  and 
plugging  it  in.  It  must  be  adminis¬ 
tered  in  an  ongoing  manner. 
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Managing  the  storage  has  both 
human  and  software  costs. 
Additionally,  the  process  of  acquiring 
storage  is  not  free  either  —  it  con¬ 
sumes  time  and  people. 

For  these  reasons,  the  acquisition 
of  storage  needs  to  be  more  than  just 
a  “box”  purchase.  It  should,  rather,  be 
part  of  the  enterprise  storage  strategy. 

Solutions  in  the  market 

There  are  various  vendor  solutions 
available  today  to  address  the  growth 
of  data  storage  requirements.  In  addi¬ 
tion,  vendors  promise  many  fresh 
solutions  soon.  The  solutions  encom¬ 
pass  several  approaches  and  have  dif¬ 
ferent  economic  values  depending  on 
their  applicability.  Of  course,  any 
potential  solution  must  address  an 
immediate  problem;  but  their  value 
must  be  examined  in  a  larger  context 
as  well.  To  understand  the  wide  vari¬ 
ety  of  solutions,  they  must  be  ana¬ 
lyzed  and  put  in  perspective. 

Before  we  look  at  the  solutions  to 
the  storage  problem,  we  first  need  to 
categorize  the  different  environ¬ 
ments.  They  are  significantly  differ¬ 
ent.  This  difference  has  to  do  with 
what  the  original  objectives  were  for 
these  systems  and  how  they  subse¬ 
quently  evolved.  It  would  be  easier  if 
there  weren’t  a  difference,  but  there 
are  many  —  and  that  leads  to  a  differ¬ 
ent  set  of  decision  criteria.  It  should 
be  pointed  out  that  efforts  to  change 
environments  have  not  been  very 
practical  or  cost- efficient.  Over  time, 
evolution  is  bringing  the  environ 
ments  closer  together,  and  at  some 
point  they  will  merge. 

Windows  NT/2000  and  the  many 
versions  of  UNIX  represent  the  open 


systems  area.  There  is  incredible 
diversity  in  these  systems,  such  that 
hardware  and  software  solutions  may 
not  operate  on  all  of  them. 

In  contrast,  IBM  dominates  the 
mainframe  world  with  its  MVS- 
OS/390-z/OS  operating  system,  and 
there’s  no  question  that  software  or 
hardware  targeted  at  that  market 
must  integrate  fully  into  the  IBM 
environment. 

The  lack  of  mature,  common  sets 
of  tools  for  the  management  of  het¬ 
erogeneous  platforms  is  a  significant 
problem  for  storage  professionals 
today,  and  increasing  the  amount  of 
storage  an  administrator  can  manage 
is  an  area  of  intense  vendor  focus. 

Part  of  laying  this  foundation  or 
background  to  the  storage  problem  is 
understanding  how  storage  is  con 
nected  to  the  servers  that  will  exe¬ 
cute  the  programs.  The  most  common 
method  has  been  a  direct  attached 
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rverless  Backup 


Fibre  Channel  SANs  are  built  for  speed  and  perform¬ 
ance.  So  are  Exabyte  native  Fibre  Channel  libraries. 
Why  sacrifice  performance  and  add  cost  to  your  stor¬ 
age  solution  with  other  tape  libraries?  Exabyte  native 
Fibre  Channel  libraries,  with  native  Fibre  Channel  M2 
tape  drives,  increase  performance  and  reliability  and 
decrease  cost  of  ownership  by  eliminating  costly, 
unreliable  routers.  And  M2  tape  drives  are  the  only 
midrange  tape  drives  in  the  world  to  provide  serverless 


backup  capability,  allowing  the  tape  drives  in  the 
library  to  communicate  directly  with  RAID  devices. 
The  result?  Backup  wi 
completely  elim 
performance  is 
up  to  5  times  that  of 
tional  backups.  Your 

operations  can  take  place  24  hours  a  day, 
days  a  week...without  i 


1 .866.  FIBRE-EX  www.exal 
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storage  (DAS)  model.  In  this  model, 
the  storage  is  connected  through  an 
interface,  such  as  SCSI  or  fibre  chan¬ 
nel,  that  runs  some  command  proto¬ 
col.  (In  the  open  systems  world,  the 
command  protocol  is  also  called 
SCSI,  which  often  leads  to  significant 
confusion.)  In  direct  attached  stor¬ 
age,  Input/Output  is  done  in  blocks 
from  the  server  to  the  storage.  This 
type  of  attachment  has  set  the  stan¬ 
dard  for  performance  and  utilization 
by  the  server.  With  DAS,  perform¬ 
ance  is  typically  characterized  by 
response  time  for  access  to  data  and 
by  bandwidth  for  aggregate  transfer 
rate  of  data. 

A  more  recent  storage  option  is 
network  attached  storage.  NAS 
allows  a  file  system  to  be  handled 
remotely.  So  rather  than  having  the 
server  on  which  the  application  runs 
use  the  local  file  system  to  drive  block 
I/O  to  an  attached  device,  as  with 
DAS,  redirector  software  sends  the 
file  request  over  a  LAN  to  another 
computing  element  (the  NAS  device). 


where  it  turns  the  file  access  to  a 
block  I/O  to  a  disk  system  that  it  con¬ 
trols.  It’s  really  a  remote  file  system. 

NAS  issues  include  the  overhead 
for  using  the  LAN  (the  TCP/IP  proto¬ 
col  stack  and  other  processing 
involved)  and  the  added  latency  that 
comes  when  another  processing  ele¬ 
ment  is  placed  in  the  I/O  access  path. 

A  storage  area  network  (SAN)  is  a 
means  to  supply  I/O  in  blocks,  as  in 
DAS  —  but  in  a  controlled,  network 
arrangement  that  permits  the  non- 
disruptive  addition  and  retirement  of 
storage,  and  also  centralizes  adminis¬ 
tration.  These  days,  SANs  are  being 
widely  implemented  in  the  enterprise 
data  center  environment  —  primarily 
using  the  physical  interface  of  fibre 
channel. 

Multiple  networks 

There  will  probably  be  two  net¬ 
works  involved  in  the  enterprise  data 
center  environment:  one  for  LANs,  for 
uses  such  as  email  and  Internet 
access;  and  another  for  the  corporate 
data  that  is  used  to  store  and  provide 
data  to  the  servers  on  which  business 
data  processing  is  done.  This  physical 


separation  of  the  corporate  data  pro¬ 
vides  the  foundation  for  the  security 
and  performance  controls  that  are 
necessary  in  handling  data  that  is  a 
valuable  corporate  asset. 

Many  storage  solutions  include 
virtualization  of  storage.  The  pur¬ 
pose:  to  enable  policy-based  automa¬ 
tion  as  one  of  the  main  contributors 
in  increasing  the  amount  of  storage 
one  manager  can  administer.  There 
are  a  variety  of  virtualization  solu¬ 
tions  being  offered  today.  They  are 
generally  classified  as  storage  net¬ 
working,  and  promise  to  consolidate 
the  management  of  storage. 

Economics  and  storage  decisions 

Now  that  the  challenge  of  manag¬ 
ing  storage  growth  is  understood,  the 
economics  involved  in  making  a  deci¬ 
sion  about  storage  acquisition  need  to 
be  examined.  Many  times,  the  tech 
nology  or  the  newness  of  a  particular 
product  becomes  a  factor  in  making  a 
decision.  That  is  a  natural  temptation 
and  is  preyed  on  by  sales  and  market¬ 
ing  strategies.  This  needs  to  be  a  busi¬ 
ness  decision,  with  all  the  facts  and 
the  implications  understood  and 


This  White  Paper  was  created  by  Computerworld’s  Custom  Pub¬ 
lishing  group.  Comments  on  this  supplement  can  be  sent  to 
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Figure  2: 

TCO  -  Total 
Cost  of 
Ownership 

Typically  looks  at  annual 
costs  of  systems/solutions. 
Elements  of  TCO  include: 

Product  Costs  -  software 
and  hardware 

•  Implementation  costs 

•  Training  costs 

Administration  (opera¬ 
tional)  costs 

•  Support  -  monitoring 
and  tuning 

•  Maintenance  (including 
power,  space,  etc.) 

•  Upgrade 

Data  unavailability  cost 

•  Direct  -  additional 
support 

•  Indirect  -  lost  business 


clearly  factored  into  the  process. 

Even  during  adverse  economic 
cycles,  decisions  about  deploying 
storage  may  have  economic  potential. 
It  is  relatively  easy  to  say  that  all  that 
needs  to  be  done  is  to  look  at  the  ROI, 
then  make  a  decision  to  go  forward 
with  a  purchase  or  project.  But  since 
storage  is  critical  to  business  and  rep- 
resents  a  large  part  of  IT  hardware 
expenditures,  examining  the  eco- 
nomics  of  the  storage  strategy  is  crit 
ical.  This  is  so  important  to  the  long¬ 
term  ability  to  provide  the  storage 
and  retrieval  of  critical  data  needed 


for  business  operation  that  it  should 
be  a  standard  business  practice. 

Understanding  TCO,  ROI 

The  mechanism  frequently  used 
for  measuring  the  economics  of  stor¬ 
age  is  the  TCO  model.  That  model 
typically  uses  an  annualized  cost  fac¬ 
tor  for  storage,  which  includes  the 
elements  of  product  costs,  adminis¬ 
tration,  costs  for  data  unavailability, 
and  other  factors.  The  maintenance 
costs  usually  include  power  and 
space  requirements.  Figure  2  contains 
some  of  the  major  components  of 
TCO. 

ROI  is  a  calculation  that  shows 
payback  for  the  investment  made.  It  is 
used  widely  in  IT  for  almost  any  type 
of  project.  Figure  3  gives  an  overview 
of  ROI. 

In  calculating  both  ROI  and  TCO, 
there  are  hard  benefits  and  soft  bene¬ 
fits,  sometimes  referred  to  as  hard 
dollars  and  soft  dollars.  Hard  benefits 
are  usually  considered  to  be: 

•  Capital  savings  or  deferred  capi¬ 
tal  investment 


•  Operational  savings 

•  Improvements  in  staff 
productivity 

The  implication  by  calling  them 
hard  benefits  is  that  these  are  measur¬ 
able  savings  that  will  be  independent 
of  other  factors.  Typically  segregated 
as  solt  benefits  are: 

•  Opportunity  costs 

•  Cost  avoidance 

They  are  considered  soft  benefits 
because  calculations  may  be  some 
what  subjective  and  may  be  greatly 
influenced  by  other  factors,  such  as 
alternatives  that  may  have  to  be 
taken.  Unfortunately,  w'hile  opportu 
nity  costs  and  cost  avoidance  are  very 
real  items  and  can  be  significant 
amounts  of  money  (and  have  long¬ 
term  business  implications),  they  are 
viewed  skeptically,  especially  if  there 
have  been  some  “creative”  justifica¬ 
tions  in  the  past. 

Most  of  the  deployments  of  SANs 
to  this  point  have  been  justified  based 
on  storage  consolidation  and  backup 
of  critical  data.  These  were  hard  ben¬ 
efit  calculations  with  very  short  pay- 


ROI  *  Return  On  Investment 

•  Calculated  on  a  per-project  basis 

•  Assessment  of  ROI  for  savings  or  gains  from  project 
implementation 

•  For  storage  decision,  this  wilt  include: 

❖  Cost  of  solution  (hardware  and  software  plus  implementation 
costs) 

❖  Savings  in  administration/operations 

❖  Gains  in  increased  business,  productivity,  customer  service,  etc. 

•  Usually  expressed  as  a  %  of  gain  with  a  payback  period  of  time 
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FAILURE  IS  NOT  AN  OPTION 

LOOK  FOR 
Tl  E  DLT  ape  LOG  . 


For  more  than  a  decade,  DLTtape"  technology 
has  been  known  for  its  unparalleled  reliability 
in  data  protection  and  retrieval.  That’s  why 
you  should  always  look  for  the  DLTtape  logo 
when  buying  DLTtape 
products.  This 
ensures  that 
your  company’s 
mission-critical 
data  is  trusted  to  a 
quality  media  that  has  met  the 
highest  standards  for  reliability, 
compatibility  and  performance.  In  fact, 
DLTtape  cartridges  must  pass  a  rigorous 
process  to  become  fully  qualified  and 
display  the  DLTtape  logo.  This  guarantees 


you’re  getting  the  de  facto  standard  for  data 
backup  and  retrieval.  Products  that  do  not 
have  the  DLTtape  logo  have  not  met  these 
rigorous  qualification  standards. 

So,  be 
sure  to  use 
cartridges 
that  carry  the 
DLTtape  logo. 
It  gives  you 
the  confidence  in  knowing  you’ve  purchased 
the  ultra-reliable  backup  solution  that’s 
chosen  5:1  by  IS/IT  managers.  To  find  out 
how  the  DLTtape  logo  has  become  the 
ultimate  symbol  of  quality  and  reliability, 
go  to  www.dlttape.com/qualified. 


©2001  Quantum  Corporation.  All  rights  reserved.  DLTtape  and  the  DLTtape  logo  are  trademarks  of  Quantum  Corporation. 
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backs  —  typically  less  than  12 
months.  A  12-month  payback  is  a 
good  decision  even  in  bad  economic 
times.  The  deployments  of  NAS  solu¬ 
tions  have  also  primarily  been  based 
on  consolidation  of  multiple  file 
servers  to  a  single  NAS  appliance.  The 
justification  or  ROI  there  has  also 
been  a  straightforward  calculation  of 
hard  benefits.  However,  these  have 
been  the  easy  solutions. 

The  largest  economic  benefit  to  a 
company  occurs  when  a  storage  strat¬ 
egy  is  implemented  that  addresses 
long-term  business  issues.  This 
involves  both  hard  and  soft  benefits, 
and  requires  that  the  storage  strategy 
be  understood  before  looking  at  the 
ROIorTCO. 


TCO  may  be  a  more  useful  tool 
here  than  ROI  because  of  the  longer 
term  associated  with  implementing  a 
complete  strategy.  The  solutions  that 
have  been  mentioned  earlier  — 
implementing  a  storage  network 
with  virtualization  of  storage  and  a 
comprehensive,  integrated  set  of  stor¬ 
age  management  tools  to  increase 
administrators’  productivity  —  defi¬ 
nitely  require  a  TCO  model  that 
includes  many  business  elements. 

TCO  is  sometimes  viewed  as  hav¬ 
ing  a  technology  section  and  a  busi¬ 
ness  section  in  which  to  group  indi¬ 
vidual  elements.  The  technology  sec¬ 
tion  of  TCO  would  include  hardware, 
software,  and  associated  personnel 
costs.  These  personnel  costs  include 


operations,  support,  consulting 
expenses,  etc. 

The  business  section  of  TCO 
includes  availability,  performance, 
and  recovery.  Availability  reflects  the 
cost  to  users  of  an  impacting  outage. 
Performance  represents  a  productivi¬ 
ty  issue  in  that  poor  response  time 
impacts  users’  productivity.  The 
impact  varies  based  on  the  individual 
application  and  number  of  users 
affected.  Recovery  is  the  time  (and 
money)  it  takes  to  get  the  operation 
back  to  normal  status.  The  time 
required  for  recovery  represents  an 
impact  in  productivity,  potential  lost 
business,  and  successive  impacts  that 
may  be  created. 

The  example  in  Figure  4  is  a  TCO 


Figure  4: 

TCO  Calculation  by  AMG  Inc. 
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If  You're  Building  A  SAN,  Why  Not  Consider  Using  The  Some  Solutions 
That  Are  At  The  Heart  Of  96%  Of  The  World's  Storage  Networks? 


Hard  at  work  at  the  very  heart  of  the  world's  most  demanding  and  reliable  storage 

networks,  you'll  find  McDATA  enterprise  solutions.  In  over  70  of  the  Fortune  g rg 

100,  10  of  the  15  largest  U.S.  banks,  and  9  of  the  10  top  ISPs.  We've  |  1 

leveraged  our  open  storage  networking  technology  and  fabric  management  software 

expertise  to  create  a  full  family  of  open  enterprise  solutions  —  core-to-edge.  MrDATA 

Oay-in  and  day-out  delivering  99.999%  availability  to  some  of  the  world's  most  torc  tdge  (nlt(pli,e  So|u,ions 
prominent  companies,  we  have  the  experience  you  can  rely  on,  too.  So  go  to  our 

web  site  or  give  us  a  call.  Without  a  doubt,  we've  got  a  solution  that  fits  your  needs,  vvww.mcdato.com/cwwp 


Core-to-Edge 
Enterprise  Solutions 

that  span  from  the  data  center,  to  the 
department  level,  all  the  way  to  the 
very  edge  of  your  enterprise. 


evaluation  done  by  AMG  Inc.,  which 
shows  an  analysis  of  both  the  technol 
ogy  section  (Hardware,  Software,  and 
Support)  and  the  business  section 
(Availability,  Performance,  and 
Recovery).  In  the  example,  the  tech- 
nology  section  shows  a  net  increase  in 
cost  for  the  proposed  system  over  the 
current  system.  The  business  section 
shows  significant  reductions  in  costs 
and  therefore  significant  value.  The 
overall  economic  value  is  a  gain  of 
about  $2  million  per  year,  according 
to  this  TCO  calculation.  Proceeding 
with  the  new  system  is  the  recom¬ 
mended  business  decision. 

The  technology  section  in  the  cal¬ 
culation  is  the  direct  calculation 
based  on  vendor  offerings  for  the  pro¬ 
posed  systems  and  the  changes  in  the 
administration  of  storage.  Of  greater 
interest  for  this  example  are  the  cal¬ 
culations  behind  the  business  section. 
To  illustrate  this,  another  example 
from  AMG  explains  the  derivation  of 
the  value  in  availability,  performance, 
and  recovery. 

For  this  example,  a  company  that 
accesses  databases  to  conduct  busi¬ 
ness  is  used.  We  assume  an  average 


salary  plus  benefits  of  $50,000  for 
employees  processing  data,  and  that 
there  are  1,000  employees  doing  this 
activity.  Looking  at  the  expected 
business  potential  with  all  employees 
busy  during  normal  work  hours,  the 
chart  in  Figure  5  breaks  down  the 
resource  dollars  that  the  company  is 
expending. 

Availability 

When  determining  the  value  of 
availability  improvement  with  the 
proposed  solution,  the  calculation  is 
based  on  spending  the  money  in  tech¬ 
nology  to  improve  availability  by  a 
specific  amount  of  time. 

In  the  AMG  example,  it  is 
assumed  that  the  technology  will 
improve  availability  for  productive 
time  by  7.5  hours  per  year.  This  is  the 
difference  between  99.9%  availability 
and  99.99%  availability.  The  business 
benefit  of  the  added  availability 
includes  the  resource  costs  of  the 
employees  and  the  direct  revenue 
generated  during  that  time  that 
would  have  been  lost  otherwise.  In 
the  example  cited  in  Figure  4,  the  rev¬ 
enue  generated  over  7.5  hours  is 


$800,000  and  the  resource  expendi 
ture  is  $180,000,  which  represents  the 
business  economics  of  availability  for 
this  particular  solution. 

Performance 

The  calculation  of  a  performance 
improvement  is  not  a  one  time  gain, 
but  an  ongoing  improvement 
throughout  the  year.  Figure  5  shows  a 
range  of  the  difference  a  performance 
improvement  makes  based  on  the 
time  lost  without  the  improvement 
and  the  associated  dollars  lost  in  pro¬ 
ductivity. 

The  actual  value  used  in  the  exam¬ 
ple  represented  in  Figure  4  is  a  more 
precise  number  based  on  a  particular 
business,  but  the  chart  in  Figure  5  is 
fairly  representative  of  the  calculation 
done.  For  this  example,  assume  the 
same  salary  and  people  in  the  earlier 
example.  The  time  lost  calculation  is 
based  on  time  lost  in  conducting  a 
transaction  when  the  response  is  at  a 
certain  value. 

The  type  of  user  profile  will  deter 
mine  the  real  impact  on  performance. 
Certain  types  of  interactive  w’ork  are 
more  financially  significant  than  oth 


Figure  5: 

Example:  Performance  Value  Calculation 
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•  400GB  capacity 

•  PSM  snapshot  capability 

•  Gigabit  &  10/100  Ethernet 

•  $5,999  MSRP 


MaxAttach  NAS  4300 
File  Server 


Put  an  end  to  lost  data  with  the 
MaxAttach™  NAS  4300  file  server 
from  Maxtor,  Only  the  MaxAttach 
4300  with  Persistent  Storage 
Manager  (PSM)  attaches  to  your  net¬ 
work  via  Ethernet  and  auto¬ 
matically  takes  snapshot?  of  your  file 
system  as  often  as  you  tell  it 
to.  Making  data  recovery  easier  than 
ever.  And  like  all  of  our  NAS  4000 
Series  products,  it  provides  disk  stor¬ 
age  for  the  cost  of  tape.  So  while 
profanity  won't  bring  your  data  back, 
the  new  MaxAttach  4300  will. 
Compare  the  MaxAttach  4000  Series 
to  other  storage  solutions  with  the 
MaxAttach  Storage  Calculator  at 
www.maxtor.com/netstor  or  call 
1-800-240-9778. 
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ers  and  must  be  quantified  based  on 
the  value  of  productivity.  This  must 
be  done  on  a  case-by-case  basis. 

The  last  of  the  business  elements 
is  recovery  of  the  business  application 
to  production  status  after  a  failure. 
The  mechanics  of  performing  the 
recovery  are  not  being  examined  — 
only  the  business  impacts  of  the 
amount  of  time  it  takes.  In  Figure  4,  it 
was  calculated  that  the  recovery  costs 
would  be  $254,423  based  on  the  busi- 
ness  lost,  productivity  affected,  and 
several  miscellaneous  recovery  costs. 

These  specific  examples  are  repre- 
sentative  of  TCO  calculations.  There 
is  more  research  and  analysis  required 
to  develop  the  analysis  that  is  beyond 
the  scope  of  this  white  paper. 

Conclusion 

Storage  decisions  have  been  ele- 
vated  to  a  very  visible  level  due  to  the 
business  implications  of  storage  and 
the  significant  amount  of  money 
involved.  The  demand  for  storage 
continues  to  rise,  and  the  ability  to 
store  and  retrieve  data  efficiently  can 
be  a  competitive  advantage.  It  has 
become  important  to  have  an  enter- 
prise  storage  strategy  that  encom¬ 
passes  not  just  technology,  but  busi¬ 
ness  decisions. 

A  storage  strategy  needs  to  be  a 
standard  business  practice,  which 
includes  the  methodology  for  making 
decisions.  Decisions  about  acquisi¬ 
tion,  technology  integration,  and 
infrastructures  are  all  part  of  that 
strategy.  The  evaluation  part  of  mak¬ 
ing  a  decision  has  to  have  sound 
financial  reasoning.  Two  methods  are 
typically  used:  Return  On 
Investment,  which  is  used  for  projects 


Because  of  their  business 
implications,  storage  deci¬ 
sions  have  been  elevated 
to  a  more  visible  level.  The 
ability  to  store  and  retrieve 
data  efficiently  can  be  a 
true  competitive  advan¬ 
tage.  Thus,  it's  more  criti¬ 
cal  than  ever  to  formulate 
an  enterprise  storage 
strategy. 


and  short-term  payback  analysis,  and 
Total  Cost  of  Ownership,  which  typi¬ 
cally  covers  a  broader  and  longer- 
term  analysis  of  a  solution. 

Using  an  ROI  calculation  for  justi¬ 
fication  makes  sense  in  showing  pay¬ 
back  for  individual  projects  or  prod¬ 
ucts.  In  difficult  economic  times  like 
these,  when  companies  are  being  very 
conservative  with  expenditures,  an 
ROI  calculation  can  convincingly 
show  the  savings  to  be  generated 
with  a  decision  on  storage  that  should 
convince  even  the  most  fiscally  con¬ 
strained  finance  officer. 

A  TCO  calculation  for  storage 
should  be  done  in  the  context  of  a 
solution  (which  includes  more  than 
just  an  individual  hardware  or  soft¬ 
ware  product)  and  should  be  a  part  of 
the  long-term  storage  strategy.  The 
storage  strategy  is  the  type  of  infor¬ 
mation  that  would  be  presented  to 


executives  in  an  operational  review. 
The  TCO  calculation  becomes  part  of 
the  effectiveness  evaluation.  It  can 
demonstrate  the  organizational  effec¬ 
tiveness  and  accomplishments.  This 
combination  of  storage  strategy  and 
TCO  calculations  also  highlight  the 
importance  of  storing  and  retrieving 
of  data  to  the  corporation. 

Hopefully,  this  discussion  of  the 
economics  of  a  storage  strategy  will 
serve  as  guidance  for  enterprises  that 
need  to  establish  storage  business 
practices  in  their  IT  organization.  In 
addition,  it  may  help  overcome  the 
cyclical  emotions  that  impact  bad 
economic  times,  and  the  “shiny  toy” 
sales  approach  favored  by  some  ven¬ 
dors  in  favor  of  sound  business  deci¬ 
sions  with  a  repeatable,  adhered- to 
process.  Regardless  of  our  enthusiasm 
for  the  subject,  this  is  a  business  issue. 
If  an  acquisition  makes  business 
sense,  there  should  be  no  hesitation 
to  proceed.  & 
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Networked  storage  for 


data  availability  and  scalability 


If  what  you  have  in  mind  is  unlimited  scalability  with  continuous  access  to  data,  then  Brocade  has 
your  solution.  It’s  called  a  Storage  Area  Network  (SAN).  The  enormous  growth  of  business  information  along 
with  the  need  for  anytime,  anywhere  data  access  requires  a  new  approach  to  data  storage.  A  networked  approach. 
A  Brocade-based  SAN  enables  your  company  to  seamlessly  add  storage  on  demand  to  meet  your  ever  growing  data  storage 
needs.  Brocade  SAN  infrastructure  solutions  are  available  from  leading  system  OEMs  and  integrators  worldwide. 


How  much  did  you  have  in  mind? 


Improve  your  data  availability  with  Storage  Area  Networks. 

Find  out  how  in  our  new  white  paper  by  visiting:  www.brocade.com/avail 
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eds.com 


EMC  EDS  Intelligent  Storage  Services,  with  the  burstable  capacity  of  Liquid  Storage^,  can  tame  your  most  volatile 

B  S>J  e-business  flows  with  confidence,  without  bursting  limited  capital  budgets.  Intelligent  Storage  Services,  offered  by  EDS 

proven  and  °^er  serv'ce  providers  digitally  powered  by  EDS,  gives  you  the  storage  capacity  you  need,  when  you  need  it. 

HKSf-  Call  us  at  888-889-1392,  or  visit  us  online  at  eds.com/storage,  before  your  current  system  leaves  you  all  wet. 


Stretching  the  limits  of  your  data  storage  systems? 
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A  Ploy  That  Didn’t  Fly 


ERE’S  A  NEW  TWIST  on  the  old  “sense  of  urgency”  ploy  that 
a  vendor  used  in  a  recently  completed  deal.  The  procure¬ 
ment  manager  of  a  global  consumer  goods  company  was 
talking  to  a  potential  vendor  about  a  deal  for  some  technol¬ 
ogy  services.  He  had  a  short  list  of  prospective  vendors,  but 
because  of  unique  requirements  imposed  by  his  company’s  biggest  cus¬ 
tomer,  he  was  talking  with  the  only  prospective  vendor  that  could  provide 


H 


the  services.  But  it  appeared  that  the  vendor  didn’t 
know  that  it  was  the  sole  contender  in  this  deal,  so 
the  company  maintained  a  strong  negotiating  stance. 

As  the  two  sides  discussed  plans  for  negotiating 
sessions,  the  vendor  announced  that  the  customer 
must  sign  the  vendor’s  letter  of  intent  to  enter  a  con¬ 
tract  before  the  two  sides  could  negotiate.  The  ven¬ 
dor’s  representative  claimed  that  he  couldn’t  reserve 
the  corporate  jet  for  his  negotiating  team  to  come  to 
the  customer’s  location  if  there  was  no  letter  of  in¬ 
tent.  Clever.  But  wait  —  it  gets  worse.  The  letter  of 
intent  had  some  ugly  “gotchas,”  such  as: 

■  The  customer  had  to  complete  its  legal  review  of 
the  contract  by  a  certain  date. 

■  Both  parties  were  to  meet  on  that  date  to  sign  the 
contract. 

The  date  specified  in  the  letter  of  intent  was  the 
same  date  that  negotiations  were  scheduled  to  start, 
so  the  vendor  was  effectively  preempting  any  mean¬ 
ingful  negotiations.  Basically,  the  vendor’s  negotiat¬ 
ing  stance  was  that  it  couldn’t  reserve  the  corporate 
jet  to  visit  if  there  was  no  letter  of  intent,  so  it 
wouldn’t  negotiate  until  the  customer 
gave  away  its  negotiating  power. 

Let’s  look  at  the  customer’s  side.  There 
are  good  reasons  for  never  signing  a  letter 
of  intent.  First,  the  intent  can  be  construed 
as  part  of  a  contract,  especially  if  there’s 
evidence  of  other  contract  components 
between  the  parties.  Ask  your  lawyer 
about  offer  and  acceptance,  reliance  and 
consideration.  If  activities  have  taken 
place  in  the  relationship  that  could  consti¬ 
tute  the  occurrence  of  these  legal  theories 
of  contract  law,  and  they  are  combined 
with  intent  (another  legal  theory  of  what 
constitutes  a  contract)  in  the  letter,  you 
could,  in  effect,  have  a  contract. 

Given  this  set  of  circumstances,  the  cus¬ 
tomer  could  be  guilty  of  breach  of  con¬ 
tract  if  it  backed  out  of  a  letter  of  intent. 

Even  without  all  the  components  of  a  con¬ 


tract  at  hand,  most  customers  feel  that  reneging  on 
a  letter  of  intent  would  be  less  than  good-faith  deal¬ 
ings  or  convey  a  lack  of  integrity. 

Of  course,  a  letter  of  intent  also  immediately 
removes  your  leverage  with  the  vendor  because  it 
eliminates  competition.  It  locks  you  in  before  you 
negotiate,  and  that’s  called  begging,  not  negotiating. 

But  in  this  deal,  is  the  big  issue  the  letter  of  intent? 
Or  is  it  the  lack  of  vendor  transportation?  Neither.  It 
was  about  the  vendor  producing  a  sense  of  urgency 
and  eliminating  customer  options  to  gain  control  of 
the  terms  and  conditions  of  the  relationship. 

Luckily,  the  corporate-jet  ploy  didn’t  fly  with  this 
customer. 

Having  faith  in  his  negotiation  process  and  know¬ 
ing  that  competition  —  real  or  imagined  —  was  a 
very  effective  bargaining  tool,  the  customer  issued  a 
simple  response  to  the  vendor.  “We  don’t  do  letters 
of  intent,  so  don’t  bother  to  come.  We  will  be  happy 
to  negotiate  via  conference  call.  However,  your  com¬ 
petition  will  be  here  in  person.” 

Remember  that  the  vendor’s  representative  proba¬ 
bly  didn’t  know  for  sure  if  he  was  the  sole 
source  in  the  deal.  He  may  have  suspected 
he  was  and  used  the  corporate-jet  ploy  as 
a  way  to  test  his  suspicion.  The  cus¬ 
tomer’s  terse  response  probably  created 
uncertainty  in  the  vendor’s  mind  and 
could  have  eliminated  any  overconfi¬ 
dence.  Shortly  thereafter,  the  vendor’s 
representative  announced  that  he  was 
able  to  get  the  corporate  jet  after  all  and 
would  be  available  to  negotiate  on  the 
date  the  customer  specified. 

This  vendor  ploy  was  designed  to  stam¬ 
pede  the  customer  into  signing  a  contract 
that  was  highly  favorable  to  the  vendor. 
The  customer’s  firm  response  was  a  very 
effective  tactic.  Best  of  all,  the  customer 
was  able  to  gain  the  high  ground  during 
negotiations,  saving  money  and  gaining 
significant  contractual  protection.  > 
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MBA  degree 
programs  that 
focus  on  IT  come 
in  as  many  varieties 
as  the  colleges  and 
universities  that  offer 
them.  But  there  are 
some  common  traits 
that  set  off  the  best 
from  the  rest. 

By  Lee  Copeland 


With  A  FEW  promo¬ 
tions  and  a  lot  of 
technical  expertise, 
37-year-old  Peter 
Webb  gained  expo¬ 
sure  to  new  areas  of  The  Math  Works 
Inc.’s  scientific  computing  business. 

But  Webb,  a  principal  technical  spe¬ 
cialist  at  the  Natick,  Mass.-based  com¬ 
pany,  also  found  that  his  bachelor’s  and 
master’s  degrees  in  computer  sci¬ 
ence  didn’t  provide  enough  in¬ 
sights  into  other  parts  of  the 
corporate  big  picture,  such 
as  marketing  and  finance,  to 
take  him  where  he  want¬ 
ed  to  go. 

“My  role  had  expanded  to 
the  point  where  I  was  at  a 
disadvantage,  and  my  technolo¬ 
gy  background  was  not  sufficient  to 
perform  at  the  level  that  I  would  like  to 
perform,”  says  Webb.  “I  would  get  into 
discussions  with  the  marketing  people, 
and  they  speak  in  this  cryptic  jargon 
that  I  couldn’t  understand.” 

To  rectify  that  situation,  Webb  en¬ 
rolled  last  year  in  the  High  Technology 
MBA  program  at  Boston-based  North¬ 


eastern  University.  He  expects  to  be 
fluent  in  the  jargon  and  concepts  of 
business  management  by  next  spring. 

But  contrast  his  approach  to  that  of 
many  IT  professionals  just  two  years 
ago,  when  students  were  abandoning 
MBA  programs  in  droves  during  the 
innovation-driven  dot-com  bubble. 

The  big  debate  for  many  then  was 
whether  a  technologist  with  smarts 
should  try  to  break  his  way  into  the 
executive  suite  through  the 
force  of  sheer  intelligence 
and  bravado,  or  take  a 
two-year  hiatus  and  pursue 
an  MBA. 

That  debate  ended 
abruptly  when  the  bubble 
burst.  With  the  demise  of 
the  dot-com  era,  MBA  pro¬ 
grams,  particularly  those  that  offer 
a  strong  concentration  in  technology, 
are  more  popular  than  ever. 

The  question  now  becomes:  Which 
schools  do  the  best  job  of  combining 
good  management  techniques  and  tech¬ 
nology  innovation  under  the  general 
heading  of  sound  business  practices? 

There  are  as  many  types  of  techno- 
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MBA  programs  as  there  are  three- 
letter  acronyms  in  the  technology 
industry. 

Each  school  takes  a  slightly  different 
approach,  but  the  overriding  theme  is 
of  shifting  the  focus  away  from  tech¬ 
nology  products  and  systems  and  plac¬ 
ing  the  emphasis  squarely  on  the  busi¬ 
ness’s  bottom  line. 

“Folks  with  an  MBA  from  a  top  busi¬ 
ness  school  weren’t  affected  by  the 
dot-com  hiccup;  they  knew  how  to 
do  a  business  plan,”  claims  Richard 
Honack,  assistant  dean  of  external 
relations  at  Northwestern  University’s 
Kellogg  School  of  Management.  “You 
have  to  teach  that  technology  is  a  tool, 
and  not  the  end-all.” 

Business  Fundamentals 

Some  programs,  such  as  the  one  at 
Evanston,  Ilk-based  Kellogg,  which  is 
routinely  ranked  as  a  top  business 
school,  take  a  finance,  accounting  and 
operations-oriented  approach  to  train¬ 
ing  business  managers.  Kellogg’s  two- 
year  program  offers  a  major  in  technolo¬ 
gy  and  e-commerce,  requires  a  summer 
internship  and  includes  courses  that 
delve  into  Internet  business  models, 
research-and-development  manage¬ 
ment,  business  intelligence  and  cus¬ 
tomer  relationship  management  tech¬ 
nologies. 

But  those  technology  classes  follow 
two  quarters’  worth  of  pure  business 
coursework.  The  Kellogg  program 
starts  with  a  core  curriculum  that  in¬ 
cludes  a  bevy  of  decision-making  and 
analysis,  statistics,  finance,  microeco¬ 
nomics  and  operations  classes. 

“If  technology  goes  down,  you  still 
have  to  operate  your  business.  It’s  al¬ 
ways  hard  to  get  past  the  bells  and 
whistles,  but  does  everybody  have  to 
have  them?”  asks  Honack,  who  adds 
that  Kellogg  trains  executives,  not 
technicians.  “They  learn  the  general 
management  of  technology  and  how  it 
weaves  its  way  throughout  a  company.” 

Northeastern’s  High  Technology 
MBA  program  eschews  the  traditional 
full-time  student  experience.  Its  stu¬ 
dents  are  full-time  professionals  who 
must  obtain  the  support  of  their  em¬ 
ployers  to  enroll. 

“The  program  is  designed  for  people 
engaged  in,  immersed  in  and  managing 
in  the  high-tech  industry.  So  the  stu¬ 
dents  must  have  support  from  their 
companies  to  be  in  the  program,”  says 
Ira  Weiss,  dean  of  the  college  of  busi¬ 
ness  administration  at  Northeastern. 
“We  are  a  co-op  program  and  leverage 
real-world  experiences  back  into  the 
classroom.” 

As  a  result,  students  at  Northeast¬ 


ern’s  techno-MBA  program  are  typical¬ 
ly  about  31  years  old.  Students  at  tradi¬ 
tional  programs,  such  as  Kellogg,  are 
usually  between  the  ages  of  27  and  28 
and  have  less  work  experience. 

Living  on  a  student’s  budget  for  two 
years  isn’t  an  option  for  everyone,  so 
Northeastern  designed  its  program 
around  the  needs  of  working  profes¬ 
sionals. 

Webb,  for  example,  has  worked  at 
Math  Works  for  the  past  seven  years 
and  holds  both  a  bachelor’s  degree  and 
a  master’s  degree  in  computer  science. 
He  wanted  to  shore  up  his  business 
acumen  by  earning  an  MBA,  but  with  a 
wife,  a  child  and  a  mortgage,  giving  up 
his  salary  while  taking  two  years  off  to 
attend  graduate  school  wasn’t  feasible. 

As  a  second-year  student  at  North¬ 
eastern,  Webb  maintains  a  full-time 


work  schedule  at  MathWorks  while 
taking  graduate  courses  on  alternating 
Tuesday  nights  and  Saturday  morn¬ 
ings.  MathWorks  pays  $5,000  of  the 
$26,000  annual  tuition. 

Webb  says  that  while  he  has  no  plans 
to  look  for  a  higher-paying  job  else¬ 
where  after  completing  the  program  in 
May,  he  believes  the  coursework  is  al¬ 
ready  paying  off. 

“No  matter  what  discipline  you’re  in 
as  part  of  [an  MBA  program],  you  learn 
to  speak  the  language  of  business,” 
Webb  says.  “I  had  already  mastered  the 
technical  part.  Now  with  the  MBA 
skills,  I  can  take  what  I  know  and  apply 
it  to  the  market  and  figure  out  how  to 
get  technology  ideas  out  of  the  lab  and 
onto  the  street.” 

But  technology-driven  MBA  pro- 

Continued  on  page  30 


We  want  the  students 
to  get  a  solid  ground¬ 
ing  in  all  aspects  of 
management  and  the 
tools  to  drive  strategic 
thoughts  to  manage 
a  business. 

CHUCK  JOHNSON  (ABOVE).  DIRECTOR, 
PROFESSIONAL  MASTER’S  PROGRAM, 
PURDUE  UNIVERSITY 


1)  Understand  and  interact  with  customers 
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management  is  asking  for  the  moon:  quickly  and  cost-efficiently 
develop  a  site  that  offers  a  personalized  experience  for  customers 
and  partners.  In  the  past,  building-in  the  kind  of  robust  data  analytics 
you’re  being  asked  for  could  take  thousands  of  hours  (most  of  them 
yours).  But  now  there’s  help:  Microsoft  Commerce  Server  2000. 


Part  of  the  flexible  Microsoft  .NET  Enterprise  Server  family,  Commerce 


Server  2000  works  with  BizTalk™  Server  2000  and  SQL  Server™  2000 
to  offer  you  a  less  complicated  and  less  time-consuming  approach  to 


building  tailored,  effective  e-commerce  solutions.  For  example, 


MARKET  FACT 


According  to  Netcraft,  the 
leading  supplier  of  market 
inteiiigence  and  Web  server 
data,  more  e-commerce  Web 
site  solutions  are  built  on  the 
Microsoft  enterprise  ^commerce 
platform  than  on  any  other* 


Commerce  Server  2000  comes 
with  fully  functional  out-of-the- 
box  starter  sites,  and  pre-built 
applications  such  as  click 
stream  analysis,  to  help  you 


get  your  site  up  and  running  even  faster.  And  with  full  XML  support, 
seamless  data  transfer  moves  from  the  wish  list  to  the  “done”  list. 


So  go  ahead  and  build  the  effective  site  you’re  being  asked 
to  build,  and  still  manage  to  have  a  life.  To  find  out  more,  visit 
microsoftcom/commerceserver  Software  for  the  Agile  Business. 
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Continued  from  page  27 
grams  aren’t  just  for  technologists 
looking  to  move  into  management. 
Many  students  hope  to  jump-start  an 
IT  career  by  entering  corporate  ranks 
from  the  management  level. 

Take  Eric  Dulin,  for  example.  A  con¬ 
sultant  with  IBM’s  $33  billion  Global 
Services  division,  Dulin,  33,  graduated 
from  Purdue  University’s  Kran- 
nert  School  of  Management 
last  May. 

He  is  a  former  captain  in 
the  U.S.  Army  who  holds  a 
bachelor’s  degree  in  man¬ 
agement  from  Louisiana 
State  University  in  Baton 
Rouge,  and  he  wanted  to  go 
into  IT  consulting  when  he  re¬ 
tired  from  the  military  in  August 
1999.  Dulin  says  he  felt  that  career 
choice  would  utilize  the  operations 
skills  he  acquired  during  his  six  years 
in  the  Army. 

“It  was  a  fresh  start  for  me,”  Dulin 
says.  “Krannert  gave  me  the  opportu¬ 
nity  to  be  in  a  technology-focused  pro¬ 
gram  and  the  opportunity  to  take  MIS 
classes  to  supplement  what  I  was  learn¬ 


ing.  [The  program]  reflects  reality,  be¬ 
cause  work  in  technology  is  aimed  at 
improving  the  business  as  a  whole.” 

One  of  Krannert’s  goals  is  to  ensure 
that  techno-MBA  students  don’t  just 
jump  into  the  deep  end  of  business 
without  a  technology-infused  lifeline, 
says  Chuck  Johnson,  director  of  the 
professional  master’s  program  at  West 
Lafayette,  Ind.-based  Purdue. 
“Many  of  our  folks  want  to 
learn  new  things  and  apply 
new  skills.  But  at  the  same 
time,  our  folks  don’t  want 
to  break  away  completely 
from  the  technology,” 
Johnson  says.  “Instead, 
they’re  asking,  ‘How  do  I 
leverage  technology  in  the  next 
level  of  my  career?’  ” 

Krannert  sponsors  a  technology 
transfer  initiative  that  pairs  its  techno- 
MBA  students  with  doctoral  students 
in  technology,  science  and  engineer¬ 
ing.  The  initiative  helps  business  stu¬ 
dents  evaluate  the  commercial  viabili¬ 
ty  and  marketability  of  new  technolo¬ 
gies,  Johnson  says. 

Accordingly,  most  MBA  programs 
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College/University 

Location 

Web  site 

Name  of  program 

IT  students’ 
Average  GMAT  score 

Ratio  of  IT  facul 
to  students 

ty 

Arizona  State  University 

Tempe,  Ariz. 

www.cob.asu.edu/acct 

College  of  Business 

636 

1:6 

Bentley  College 

Waltham,  Mass. 

www.bentley.edu/graduate 

McCalium  Graduate  School  of  Business 

570 

1:8  HI 

Georgia  Institute  of  Technology 

Atlanta 

www.dupree.gatech.edu 

Dupree  College  of  Management 

635 

1:7 

Georgia  State  University 

Atlanta 

www.robinson.gsu.edu 

Robinson  College  of  Business 

■■■■ 

1:7 

Indiana  University 

Bloomington,  Ind. 

www.bus.indiana.edu 

Kelley  School  of  Business 

660 

1:30 

Michigan  State  University 

East  Lansing,  Mich. 

mba.bus.msu.edu 

The  Eli  Broad  Graduate  School  of  Management 

627 

1:8  M\ 

Northeastern  University 

Boston 

www.cba.neu.edu 

Graduate  School  of  Business  Administration 

626 

1:4 

Northwestern  University 

Evanston,  111. 

www.kellogg.nwu.edu 

Kellogg  Graduate  School  of  Management 

700 

1:7 

Purdue  University 

West  Lafayette,  Ind. 

www.mgmt.purdue.edu 

Krannert  School  of  Management 

641 

1:3 

Rensselaer  Polytechnic  Institute 

Troy,  N.Y. 

http://lallyschool.rpi.edu 

Lally  School  of  Management  and  Technology 

622 

1:4 

University  of  Arizona 

Tuscon,  Ariz, 

www.eller.arizona.edu/mba 

Eller  College  of  Business  and  Public  Administration 

652 

1:23 

University  of  California,  Berkeley 

Berkeley,  Calif. 

www.haas.berkeley.edu 

Haas  School  of  Business 

690 

1:14 

University  of  California,  Irvine 

Irvine,  Calif. 

www.gsm.uci.edu 

Graduate  School  of  Management 

669 

1:6 

University  of  California,  Los  Angeles 

Los  Angeles 

www.anderson.ucla.edu 

The  Anderson  School  at  UCLA 

700 

1:10 

■  1 

University  of  Georgia 

Athens,  Ga. 

www.terry.uga.edu 

Terry  College  of  Business 

641 

1:3 

University  of  Illinois  at  Urbana-Champaign 

Urbana,  III. 

www.mba.uiuc.edu 

College  of  Commerce  &  Business  Administration  -  MBA  Program 

621 

1:9  M\ 

University  of  Maryland 

College  Park,  Md. 

www.rhsmith.umd.edu 

Robert  H.  Smith  School  of  Business 

655 

1:5 

University  of  Michigan 

Ann  Arbor,  Mich. 

www.umich.edu/-cisdept 

University  of  Michigan  School  of  Business 

675** 

1:4 

m\ 

University  of  Minnesota,  Twin  Cities 

Minneapolis 

http://carlsonmba.umn.edu/ 

Carlson  School  of  Management 

646 

1 : 4  j| 

University  of  North  Carolina 

Chapel  Hill.  N.C. 

www.kenan-flagler.unc.edu 

Kenan-Flagler  Business  School 

666** 

1:8 

University  of  Pennsylvania 

Philadelphia 

www.wharton.upenn.edu 

Wharton  School  of  Business 

700** 

1:12 

University  of  Pittsburgh 

Pittsburgh 

www.katz.pitt.edu 

Katz  Graduate  School  of  Business 

622 

1:4 

••SI 

University  of  Rochester 

Rochester,  N.Y. 

www.simon.rochester.edu 

William  E.  Simon  Graduate  School  of  Business 

609 

1:12 

University  of  Texas  at  Austyi 

Austin,  Texas 

www.texasmba.bus.utexas.edu 

McCombs  School  of  Business 

1:16 

■1 

University  of  Washington 

Seattle 

www.mba.washington.edu 

University  of  Washington  Business  School 

652 

1:8 

Methodology:  As  is  (he  traditional  process  for  this  project,  Computerworld conducted  its  fourth  annual  Tech¬ 
no-MBA  Survey  in  two  parts.  In  April  through  June,  we  asked  campus  recruiters  nationwide  to  nominate  the 
best  techno-MBA  programs,  based  on  their  experience  hiring  graduates  from  those  programs.  We  also  asked 


college  and  university  MBA  programs  to  nominate  the  best  techno-MBA  programs  nationally,  other  than  their 
own  programs,  based  on  the  quality  of  the  curricula  in  those  programs.  The  results  of  these  surveys  produced 
our  top  candidates  for  the  techno-MBA  survey.  As  the  second  part  of  the  project,  this  summer  Computerworld 


COMPUTERWORLD  October  22, 2001 


BUSINESSCAREERS 


31 


that  offer  a  technology  concentration, 
major  or  track  don’t  cover  the  same 
ground  as  graduate  programs  that  focus 
on  technology.  Instead,  these  programs 
stress  achieving  business  goals  that  in¬ 
volve  technology,  so  the  emphasis  is  on 
analytical  skills,  business  operations 
and  financial  imperatives. 

“We  focus  on  not  the  technical  skills, 
but  on  the  strategic  savvy  to  use  tech¬ 
nology  in  a  way  that  provides  an  ad¬ 
vantage  to  the  organization,”  says 
Robert  S.  Sullivan,  dean  of  the  Kenan- 
Flagler  Business  School  at  the  Uni¬ 
versity  of  North  Carolina  (UNC)  at 
Chapel  Hill. 

At  UNC’s  program,  35%  of  students 
enter  the  program  with  an  engineering 
or  technical  degree,  Sullivan  says. 

Michael  Holmes,  30,  is  one  such  stu¬ 
dent.  With  a  bachelor’s  degree  in  me¬ 
chanical  engineering  from  the  Univer¬ 
sity  of  Rochester  in  New  York,  Holmes 
says  he  was  putting  his  technical,  prob¬ 
lem-solving  and  analytical  skills  to 
work  as  a  sales  engineer  earning 


to  core  business  and  finance  concepts. 

Obtaining  hands-on  real-world  expe¬ 
rience  during  the  course  of  the  gradu¬ 
ate  program  is  another  important  com¬ 
ponent  of  most  MBA  programs. 

Real-World  Problems 

Many  schools  work  with  companies 
to  give  their  students  access  to  new 
technologies  and  new  business  prob¬ 
lems  that  could  be  solved  with  tech¬ 
nology. 

The  University  of  Illinois  at  Urbana- 
Champaign,  for  example,  offers  an  ap¬ 
plied  business  seminar  that  requires 
students  to  create  business  plans  and 
real-world  projects. 

Purdue’s  Krannert  incorporates 
hands-on  experience  by  inviting  com¬ 
panies  to  work  with  students  on  real 
projects  and  by  partnering  with  tech¬ 
nology  vendors  such  as  SAP  AG  and 
Hewlett-Packard  Co.  The  partnership 
helps  students  gain  additional  insights 
about  key  applications  and  technolo¬ 
gies  that  they  might  have  to  manage 


ment  and  the  tools  to  drive  strategic 
thoughts  to  manage  a  business,”  says 
Johnson.  “They  get  the  opportunity  to 
get  their  hands  dirty  and  apply  their 
technical  knowledge  with  newfound 
strategic  knowledge.” 

For  example,  New  York-based  Philip 
Morris  Cos.  focused  a  project  on  com¬ 
petitive  market  analysis  and  an  analy¬ 
sis  of  whether  developing  an  online 
consumer  goods  marketplace  made 
good  business  sense,  Dunlin  says.  The 
students  and  Philip  Morris  staffers 
concluded  that  the  combination  of 
high  logistics  costs  and  low  profit  mar¬ 
gins  on  commodity  goods  would  make 
it  difficult  to  turn  a  profit  on  the  online 
venture. 

“There’s  no  room  in  an  MBA  pro¬ 
gram  for  assuming  something  works 
and  that  everyone  loves  it,”  Dulin  says. 

That  ability  to  distinguish  between 
what’s  technologically  possible  and 
what’s  feasible  in  terms  of  the  mar¬ 
ketability,  financing  and  profitability  of 
technology-driven  business  initiatives 


We  focus  on 
not  the  technical 
skills,  but  on  the 
strategic  savvy  to  use 
technology  in  a  way 
that  provides  an 
advantage  to  the 
organization. 


$150,000  per  year.  He  says  he  decided 
to  enter  Kenan-Flagler  last  year  to  pol¬ 
ish  those  skills  and  gain  more  exposure 

later  in  their  careers. 

“We  want  the  students  to  get  a  solid 
grounding  in  all  aspects  of  manage- 

is  at  the  heart  of  all  the  curriculums  in 
all  of  Computer-world's  Top  25  MBA 
programs.  1 

ROBERT  S.  SULLIVAN,  DEAN, 
KENAN-FLAGLER  BUSINESS  SCHOOL, 
UNIVERSITY  OF  NORTH  CAROLINA 

. _ 

Graduate  IT  classes 
with  fewer  than 

25  students 

Graduate  classes 
with  IT-related 
internships 

Graduate  classes 

requiring  real-world  IT  faculty  with 

IT  problem  solving  Ph.D.  or  DBA 

Number  of 

IT  graduates 
in  spring  2001 

2000  IT  graduates 
accepting  employment 
within  six  months 

Average  salary 
of  spring  2000 

IT  graduates 

Average  tuition 
for  in-state  students 

Average  tuition  for 
out-of-state  students 

26% 

84% 

70% 

86% 

101 

96% 

$79,057 

$7,344 

$15,800 

[  41% 

90% 

100% 

91% 

103 

HHR  98°°  m 

$65,010 

$23,000 

$23,000 

14% 

100% 

100% 

100% 

27 

100% 

$92,938 

$4,902 

$17,202 

8% 

10% 

86% 

96% 

199 

87% 

$63,000 

$4,000 

S16.000 

50% 

95% 

100% 

100% 

50 

99% 

$105,000 

$9,000 

$19,000 

25% 

100% 

17% 

100% 

23 

100% 

$80,850 

$12,800 

$16,900  r 

0% 

100% 

100% 

100% 

38 

100% 

$90,000 

$25,574 

$25,574 

0% 

100% 

60% 

20% 

200 

100% 

Iff  $140,000 

$28,677 

$28,677  5 

50% 

97% 

63% 

100% 

26 

100% 

$93,016 

$8,872 

$17,992 

0% 

NT 

100% 

100% 

,  17 

100% 

$73,000 

$22,317 

$22,317 

62% 

56% 

100% 

95% 

22 

100% 

$67,810 

$9,348 

$17,804 

HHHHBHS 

70%  f§§ 

70% 

100% 

96 

99.5% 

$128,300 

$10,458 

$20,702 

60% 

82.5% 

55% 

100% 

155 

100% 

$81,466 

$11,499 

$21,743 

30% 

75% 

NT 

100% 

45 

83.3% 

$90,000 

$11,744 

$22,448 

0% 

NT 

75% 

100% 

48 

89% 

$72,300 

$3,776 

$12,794 

10% 

66% 

96% 

100% 

71 

95% 

$75,146 

$12,410 

$20,136 

60% 

79% 

72% 

100% 

58 

100% 

$85,959* 

$11,830 

$16,193 

0% 

20% 

60% 

100% 

80 

100% 

$140,000' 

$23,686 

$28,686 

57% 

98% 

80% 

93.3% 

24 

98% 

$72,600 

$14,515 

$18,320 

10% 

23% 

100% 

100% 

40 

97% 

$77,480 

$14,789 

$26,739 

20% 

100% 

5% 

100% 

89 

100% 

$100,000 

$32,618 

$32,618 

62% 

100% 

70% 

100% 

35 

100% 

$75,500 

$20,812 

$33,094 

22% 

5% 

60% 

86% 

85 

100% 

$79,567 

$26,460 

$26,460 

66% 

95% 

83% 

92% 

120 

100% 

$74,200 

$8,525  * 

$21,185 

100% 

100% 

60% 

87% 

28 

100% 

$71,600 

$5,859 

$14,580 

asked  the  colleges  and  universities  to  provide  detailed  information  about  their  techno-MBA  degree  programs.  In 
addition  to  the  25  programs  listed  above,  the  following  schools  were  nominated  as  among  the  best,  but  failed  to 
provide  information  about  their  programs:  Carnegie  Mellon  University,  MIT,  Harvard  University,  Duke  University, 


Stanford  University  and  New  York  University. 

Notes:  NA  =  Not  available;  NT  =  Not  tracked;  *  Includes  bonus;  **  Total  class; 
1  Includes  consultant  salaries 
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Managing  IT  security  in  tightly  controlled  nations  or  tur¬ 
bulent  regions  can  be  vexing  for  IT  leaders  charged  with 
orchestrating  operations  overseas.  By  Deborah  Radcliff 


IF  YOU’VE  GOT  A  network  in  Rus¬ 
sia,  you  must  register  your  encryp¬ 
tion  methods  and  programs  with 
the  government.  All  data  and  voice 
traffic  in  China  goes  through  gov¬ 
ernment-owned  switching  centers. 
Cyberactivism,  internal  espionage 
and  embezzlement  are  rampant  in 
South  America.  And  in  volatile  areas 
like  the  Middle  East,  terrorism  poses 
great  physical  risk  to  both  networks 
and  personnel. 

If  you’re  asked  to  set  up  a  network 
overseas,  would  you  even  know  where 
to  start?  If  not,  your  company  could 
lose  valuable  intellectual  property,  be 
fined  or  even  be  expelled  for  not  fol¬ 
lowing  the  rules,  says  Perry  Luzwick, 
director  of  information  assurance  ar¬ 
chitectures  at  Northrop  Grumman 
Corp.’s  IT  sector  in  Herndon,  Va.. 

More  than  35,000  branches  of  2,600 
U.S.  firms  operate  overseas  today,  ac¬ 
cording  to  the  2001  edition  of  the  Direc¬ 
tory  of  American  Firms  Operating  in 
Foreign  Countries.  And  if  the  Fortune 
500  client  base  of  Exodus  Communica¬ 
tions  Inc.  in  Santa  Clara,  Calif.,  is  any 
indication,  most  businesses  don’t  have 
staffers  with  the  knowledge  IT  man¬ 
agers  need  to  set  up  secure  networks 
overseas,  says  Bill  Hancock,  senior  vice 
president  of  security  at  Exodus. 

For  example,  Hancock  cites  a  client 
(a  “very  large  bank”)  that  asked  Exo¬ 
dus  to  set  up  free  exchange  of  informa¬ 
tion  among  its  sites  in  Germany,  Lon¬ 
don,  New  Jersey,  Tokyo,  Hong  Kong 
and  Sydney,  Australia.  The  client’s  CIO 
had  no  idea  about  the  rules  governing 
data  security  and  privacy  in  the  coun¬ 
tries  involved. 

Hancock’s  team  started  by  asking 
the  CIO  what  type  of  information  the 
bank  wanted  to  share.  The  CIO  said  it 
wanted  international  customer  access 


to  account  information.  When  the  Exo¬ 
dus  team  started  checking  the  laws  in 
those  countries,  “it  became  a  very  large 
snowball,”  Hancock  says.  For  starters, 
under  the  U.K.’s  Regulatory  Investiga¬ 
tive  Powers  Act,  authorities  conducting 
criminal  investigations  can  compel  an 
Internet  service  provider  to  turn  over 
encryption  keys,  client  data  and  any  ad¬ 
ditional  investigative  support  they  re¬ 
quest,  Hancock  explains.  In  Japan,  pri¬ 
vate  information  must  be  stored  in  sep¬ 
arate  systems  or  files  with  strict  access 
controls.  And  in  China,  encryption  is 
strongly  regulated,  and  all  Internet  and 
telephone  traffic  must  pass  through 
specific  government  connection  points. 

“You  have  to  decide  if  you  even  want 
to  park  data  in  some  of  these  locations,” 
Hancock  says,  “because  it  may  be  inter¬ 
cepted  and  scanned  by  the  government.” 

Who  You  Know 

If  your  organization  is  moving  into 
one  of  these  regions,  a  good  place  to 
gather  background  information  is 
among  your  peers  at  companies  that 
have  already  set  up  networks  there, 
says  John  Hartmann,  vice  president  of 
security  at  Cardinal  Health  Inc.,  a  $49. 
billion  pharmaceutical  and  medical 
services  company  in  Dublin,  Ohio, 
with  operations  in  23  countries. 

“If  you’re  in  pharmaceuticals,  talk  to 
someone  who’s  doing  the  same  busi¬ 
ness  in  Beijing,”  he  says.  “Or  talk  to 
someone  in  the  tech  industry  who’s 
losing  their  shirt  in  Japan.” 

It’s  likely  that  those  companies  can 
share  not  only  their  experiences  but 
also  references  to  international  busi¬ 
ness  consulting  firms.  One  that  Cardi¬ 
nal  relies  on  is  Control  Risks  Group,  a 
London-based  firm  that  provides 
geopolitical,  investigative  and  crisis 
management  services  in  more  than  130 


countries.  For  intelligence  services 
specific  to  IT  infrastructure,  Cardinal 
uses  a  second  company,  Vigilinx  Inc.  in 
Parsippany,  N.J.,  which  is  staffed  by 
former  military  intelligence  agents. 

Hartmann,  a  former  special  agent 
with  the  FBI’s  foreign  counterintelli¬ 
gence  squad,  knows  firsthand  the  dan¬ 
gers  of  government-sponsored  espi¬ 
onage  against  U.S.  firms.  “If  you’re  in 
China  with  proprietary  computer  code 
or  formulas  that  you  need  to  protect, 
you  should  realize  that  these  foreign 
governments  aren’t  going  to  protect 
your  IT  infrastructure,”  says  Hart¬ 
mann.  “Countries  like  Russia  and  re¬ 
gions  in  Asia  openly  acknowledge  that 
they  steal  business  information.” 

In  China,  the  main  targets  for  gov¬ 
ernment-sponsored  espionage  include 
pharmaceutical,  manufacturing, 
telecommunications  and  technology 
businesses,  according  to  intelligence 
reports  and  experts. 

U.S.  technology  is  just  as  vulnerable 
in  Russia,  according  to  a  recent  Vig¬ 
ilinx  report.  “In  Russia,  when  you  set 
up  a  network,  all  your  traffic  —  tele¬ 


phones,  mobile  phones  and  any  elec¬ 
tronic  computer  data  transfers  —  go 
through  points  monitored  by  Russian 
agencies,”  says  Mike  Assante,  Vigilinx’s 
vice  president  of  intelligence  and  a  for¬ 
mer  U.S.  Navy  intelligence  officer.  And 
if  you  use  encryption,  you  must  regis¬ 
ter  your  methodologies  and  technolo¬ 
gies  to  apply  for  a  license,  he  adds. 

In  some  countries,  a  local  represen¬ 
tative  may  be  the  only  way  for  a  busi¬ 
ness  to  establish  a  presence,  let  alone 
learn  the  legalities  of  setting  up  net¬ 
work  operations  there. 

“I  remember  trying  to  get  a  network 
connection  site  into  Santo  Domingo  a 
few  years  ago.  We  couldn’t  get  help 
from  anybody  until  one  of  our  employ¬ 
ees  contacted  a  brother-in-law  who 
worked  for  the  phone  company  in  San¬ 
to  Domingo,”  Hancock  says. 

A  local  tie  is  particularly  important 
in  South  America,  where  business-to- 
business  networking  is  growing  162% 
annually,  says  Jose  Alfonsin,  vice  presi¬ 
dent  of  South  American  strategic  al¬ 
liances  at  Digital  Defense  Inc.,  a  secu¬ 
rity  consultant  in  San  Antonio. 

“In  South  America,  the  business  cul¬ 
ture  is  such  that  they  don’t  take  too 
well  to  outsiders.  So  if  you’re  intro¬ 
duced  by  a  local,  your  chance  of  suc¬ 
cess  is  much  higher,”  he  explains. 

Alfonsin,  who  has  had  his  hand  in 
network  operations  for  many  of  South 


Online  Links:  Intelligence  Sources 

PRIVATE-SECTOR  RESOURCES 

■  www.vigilinx.com  —  IT  security  intelligence  services  and 
reports  on  Russia,  China  and  India  ($2,500  per  copy) 

■  www.crg.com  —  Control  Risks  Group,  a  consulting  firm  that  offers 
IT  security  services;  site  includes  list  of  terrorist  regions  in  world 

■  www.asisonline.org  —  The  American  Society  for  Industrial  Security 

GOVERNMENT  RESOURCES 

■  www.bxa.doc.gov/dpl  —  Denied  Persons  List,  Bureau  of  Export  Ad¬ 
ministration,  U.S.  Department  of  Commerce 

■  www.ds-osac.org  —  Overseas  Security  Advisory  Council,  Bureau  of 
Diplomatic  Security,  U.S.  Department  of  State  (travel  and  cyber¬ 
warnings,  chiefs  of  state  in  foreign  governments) 
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America’s  largest  cement  and  building 
equipment  makers,  says  encryption 
controls  aren’t  a  problem  for  most  of 
the  continent.  But  because  e-business 
is  relatively  new  there,  risks  from  un¬ 
derskilled  technology  workers  running 
vulnerable  machines  is  a  big  problem. 
Data  protection  is  further  compounded 
by  the  high  rates  of  internal  espionage 
and  embezzlement.  And  in  some  coun¬ 
tries,  hactivism  is  rampant,  he  says. 

“Local  people  approach  me  all  the 
time  trying  to  get  business  secrets 
from  me,”  he  says.  Once,  Alfonsin’s 
seatmate  on  a  flight  from  Brazil  offered 
him  a  free  laptop  “if  I  would  just  tell 
him  who  I  was  working  with  and  what 
they  were  up  to.” 

What  You  Do 

If  an  IT  manager  is  familiar  with  the 
geopolitically  inspired  threats  in  the 
countries  their  organizations  are  mov¬ 
ing  into,  they  can  better  design  securi¬ 
ty  policies  and  controls  around  these 
threats.  For  example,  background 
checks  and  education,  along  with  regu¬ 
lar  network  security  assessments  by  a 
tech-sawy  outside  consultant,  will  go 
far  to  mitigate  risks  associated  with 
doing  business  in  South  America,  Al- 
fonsin  says.  And  in  known  terrorist  re¬ 
gions,  perimeter  security  will  be  your 
best  protection,  advises  John  Braden, 
U.S.  director  of  managed  security  op¬ 
erations  at  Ubizen,  a  Belgium-based 
security  consulting  firm. 

“Once  you  do  your  risk  analysis,  you 
have  a  list  of  specific  things  you  must 
be  concerned  about  in  that  region,” 
Braden  says.  “Then  look  at  the  assets 
you  have  and  build  a  team  to  address 
each  action  item.” 

If  the  risk  is  too  great,  IT  managers 
may  decide  to  severely  limit  what  data 
flows  through  networks  in  certain  ar¬ 
eas,  says  Luzwick.  “You  may  have  to 
resort  to  the  lowest  common  denomi¬ 
nator,”  he  says.  “That  may  mean  deliv¬ 
ering  hard-copy  information  for  scan¬ 
ning,  carrying  it  out  on  disk  or  CD- 
ROM,  or  even  delivering  it  from  brain 
to  brain,  face  to  face.”  I 
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AMERICA 

Risks: 

■  State-sponsored  hactivism 

■  Insider  threat  of  espionage  and 
embezzlement 

■  Lack  of  networking  security 
knowledge  among  local  workforce 

Precautions: 

■  Conduct  financial,  employment 
and  criminal  background  checks 
on  hirees 

■  Educate  employees  on  security 
policies  and  procedures 

■  Technical  controls:  strong  pass¬ 
word  arid  access  controls,  com¬ 
puter  time-outs,  password  log-on 

■  Conduct  frequent  network  vul¬ 
nerability  assessments  and  patch 
where  needed 

SOURCE:  JOSE  ALFONSIN,  VICE  PRESIDENT 
FOR  SOUTH  AMERICAN  STRATEGIC 
ALLIANCES.  DIGITAL  DEFENSE  INC.,  SAN 
ANTONIO 


MIDDLE  EAST 

Risks: 

■  Physical  risk  from  terrorists 
where  network  operations  occur 

■  Forbidden  encryption  and 
Internet  access  in  some  regions 

Precautions: 

Implement  strong  perimeter 
controls,  including: 

■  Surveillance  cameras 

■  Parking  and  visitor  passes 

■  Centralized  delivery  areas 

■  Employee  training  (on  reporting 
anything  unusual,  like  unmarked 
or  unregistered  vehicles  in  the 
delivery  or  garage  areas) 

■  Card  entries  and  security  guards 

■  Biometric  access  to  the  most 
sensitive  areas  of  buildings 

SOURCE:  JOHN  BRADEN,  U.S.  DIRECTOR  OF 
MANAGED  SECURITY  OPERATIONS.  UBIZEN 
INC.,  RESTON.  VA. 


RUSSIA 

Risks: 

■  Government-sponsored  and 
rogue  hactivism  and  data  snooping 

■  All  data  and  voice  traffic  is  rout¬ 
ed  through  government-owned 
switches  and  hubs 

■  Only  cryptographic  systems  ap¬ 
proved  by  the  Federal  Agency  of 
Governmental  Communications 
and  Information  (FAPSI)  may  be 
used 

Precautions: 

■  Be  aware  that  FAPSI  will  de¬ 
mand  access  to  all  technical  data 
it  deems  necessary  to  approve  a 
system 

■  Limit  content  of  all  communica¬ 
tions  to  data  that  might  be  shared 
with  FAPSI 

■  Use  trusted  couriers  for  all  other 
data 

SOURCE:  VIGILINX  INC.,  PARSIPPANY.  N.J 


CHINA 

Risks: 

■  Rampant  software  piracy 

■  Hactivism 

■  Government-controlled 
telecommunications  companies 

■  Source  code  to  all  security 
products  must  be  given  to  the 
government 

■  Government-controlled 
encryption  policies 

Precautions: 

■  Limit  access  to  proprietary  data: 
Segment  networks  and  employ 
intrusion  detection 

■  Maintain  physical  security 
barriers 

■  Maintain  and  routinely  revalidate 
electronic  security  measures  and 
tools 

■  Develop  contingency  plans  and 
incident-response  procedures 

SOURCE.  VIGILINX 
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’Threat  axis  index  level  definitions:  0  -  nonexistent:  no  cases  reported:  no  damage.  1  -  low:  isolated  incidents  reported:  damage  is  none  to  minor.  2-  sporadic:  episodes  of 
increased  activity  followed  by  a  return  to  lower  levels:  minor  to  major  damage.  3  -  moderate:  incidents  reported  monthly:  minor  to  major  damage.  4  -  common:  incidents  re¬ 
ported  weekly:  minor  to  severe  damage.  5  -  pervasive:  incidents  occur  almost  daily:  minor  to  severe  damage. 
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Portals: 

Build  Them  Right 
And  They  Will  Come 

Fast  on  their  way  to  becom¬ 
ing  the  primary  way  profession¬ 
als  share  information,  portals 
are  red  hot  within  organizations 
today.  But  to  paraphrase  a 
popular  movie,  if  you  build  a 
portal,  will  they  come?  And  if 
users  come,  will  they  stay? 

The  short  answer  is,  “not 
necessarily.”  The  reason  is  that 
firms  don’t  always  don’t  take  a 
true  customer-centric  approach 
to  building  portals  to  assure  an 
optimal  user  experience. 

Moreover,  firms  frequently 
underestimate  the  complexity 
of  integrating  legacy  data  and 
other  information  sources  to  be 
linked  with  portals. 

“When  building  portals,  you 
need  to  think  in  terms  of  end  to 
end  business  outcomes  and  the 
complete  lifecycle,”  notes  Terry 
Hisey,  V.  P.  and  G.  M.,  e-Business 
at  Unisys.  “The  corporate  portal 
begins  with  an  alignment 
between  business  and  portal 
strategies  incorporating  the  right 
information,  from  whatever 
source,  and  delivering  it  in  a  pro¬ 
ductive  and  time-sensitive  man¬ 
ner  to  a  personalized  interface.” 

To  make  this  dream  a  reality 
for  clients,  Unisys  has  combined 
its  rock-solid  experience  in  con¬ 
sulting  and  integration  with  break¬ 
through  patent-pending  method¬ 
ologies.  To  learn  how  Unisys 
can  help  conceive,  build  and 
manage  world-class  portals,  visit: 
www.aheadforebusiness.com 
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We  have  a  head  for  e-business. 
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Finding  a  Safe 
Haven  for  Respect 

The  week  after  the  catastrophic  ter¬ 
rorist  attacks  on  the  U.S.,  I  contacted  as 
many  Muslim  American  IT  workers  as 
I  could  find  to  see  whether  they  were 
being  subjected  to  backlash. 

Those  I  was  able  to  reach  were  all  doing  fairly 
well.  Although  they  were  uneasy  about  their  safety 
on  the  street,  they  said  their  co-workers  had  rallied 
around  them  and  that,  overall,  they  felt  “lucky.”  We 
shared  some  black  humor  about  the  irony  of  some 
Americans  feeling  lucky  that  other  Americans 
weren’t  attacking  them. 


But  one  acquaintance,  Mohanbir 
Sawhney,  noted  that  Muslim  Ameri¬ 
cans  in  IT  were  feeling  safe  at  work 
because  they  are  known  at  work. 

“Ignorance  is  the  root  cause  of 
intolerance,”  he  says.  “We  in  IT  live 
in  a  privileged  section  of  society. 
We’re  not  representative  of  the  guy 
in  the  street  —  of  the  ignorance  that 
causes  the  discrimination  —  or  of 
the  guy  on  the  receiving  end.  The 
people  who  will  be  hurt  are  the  guys 
in  the  gas  stations  and  in  the  conve¬ 
nience  stores.  My  heart  goes  out  to 
those  guys.” 

Though  not  a  Muslim  himself, 
Sawhney  is  in  a  minority  that  is 
among  the  most  at  risk  in  the  back¬ 
lash  against  Islam. 

He  grew  up  in  India  and  got  his 
engineering  degree  and  MBA  there. 
He  came  to  the  U.S.  in  1989  to  get  a 
doctorate  in  marketing  from  The 
Wharton  School  at  the  University 
of  Pennsylvania  in  Philadelphia  and 
has  been  teaching  at  the  Kellogg 
School  of  Management  at  North¬ 
western  University  in  Evanston, 

Ill.,  since  1993.  He  heads  the  technol¬ 
ogy  and  e-commerce  group  at  Kel¬ 
logg  and  is  the  director  of  the  Re¬ 
search  Center  on  Technology  and 
Innovation. 

He  teaches  250  MBA  students  per 


year,  speaks  to  5,000  executives  at 
various  conferences,  serves  on  the 
advisory  boards  of  dozens  of  corpo¬ 
rations  and  has  consulted  for  25  For¬ 
tune  500  companies. 

Sawhney  is  also  a  follower  of  the 
Sikh  religion,  and  he’s  among  the 
people  most  at  risk 
because  his  religious 
beliefs  require  him  to 
wear  a  turban  and  keep 
a  beard. 

“It  seems  that  we  may 
be  setting  ourselves  up 
for  another  tragedy:  the 
tragedy  of  intolerance 
against  people  simply 
based  on  their  appear¬ 
ance  or  ethnic  back¬ 
ground,”  he  says. 

“Sikhs  are  a  peaceful, 
enterprising  and  produc¬ 
tive  community,”  he  says.  “We  con¬ 
sider  ourselves  as  patriotic  as  any 
other  community.” 

Unfortunately,  all  the  pictures  of 
Osama  bin  Laden  and  Taliban  lead¬ 
ers,  who  all  wear  turbans  and  have 
beards,  and  the  general  ignorance 
of  Americans  about  who  Sikhs  are 
have  resulted  in  more  than  250  hate 
crimes  against  the  Sikh  community, 
including  a  fatal  shooting  of  a  gas 
station  attendant  in  Arizona  by  a 


sick,  self-styled  “patriot.” 

“The  only  way  to  combat  intoler¬ 
ance  is  to  educate  people  about  dif¬ 
ferent  races  and  ethnicities  and  to 
convince  them  that  not  all  Muslims 
are  terrorists,  that  Sikhs  aren’t  the 
Taliban  just  because  they  wear  tur¬ 
bans,”  Sawhney  says. 

“We  don’t  want  to  go  out  and 
tell  people,  ‘Look,  I’m  not  Muslim,’ 
because  that  implies  there’s  some¬ 
thing  bad  about  Muslims.  At  the 
same  time,  people  need  to  appreci¬ 
ate  differences,”  he  says. 

“We  may  look  different,  but  we 
are  just  as  American  as  they  come,” 
Sawhney  says. 

Sawhney  is  proud  of  his  identity 
and  proud  that  it  sets  him  apart.  But 
he  says  he’s  concerned  about  his 
family,  including  his  3-year-old  son, 
who  wears  a  little  turban,  and  his 
5-year-old  daughter. 

“Kids  can  be  pretty  intolerant,”  he 
observes. 

Like  other  innocents  whose  eth¬ 
nicity  or  religion  makes  them  sus¬ 
pect  in  the  eyes  of  the  ignorant, 
Sawhney  has  found  a  safe  haven  at 
work,  where  he  is  known  and  appre¬ 
ciated  as  an  individual. 

But  several  of  Sawhney’s  Sikh 
friends  have  been  harassed  and  ver¬ 
bally  abused.  One,  a  partner  at  a  law 
firm,  was  stopped  by  local  police  for 
no  apparent  reason  while 
driving  home,  he  says. 
And  their  temples  have 
been  attacked. 

“This  is  what  the  ter¬ 
rorists  set  out  to  accom¬ 
plish  —  to  tear  apart  the 
fabric  of  U.S.  society,” 
Sawhney  says.  “We’re 
playing  into  their  hands. 
Ninety-eight  percent  of 
people  don’t  think  this 
way,  but  we’ve  just  seen 
that  a  very,  very  small 
minority  can  create  dis¬ 
proportionate  damage.” 

Sawhney  says  it’s  futile  to  preach 
tolerance,  but  we  can  at  least  attack 
ignorance  and  hope  that  awareness 
leads  to  a  better  appreciation  of 
diversity  and  the  strength  it  brings 
us  as  a  nation. 

“Diversity  is  what  makes  us  what 
we  are,”  he  says.  “If  we  don’t  under¬ 
stand  that,  we  may  win  the  war  in 
Afghanistan  but  lose  the  war  at 
home.”  ► 
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How  do  we  take  your  current 
communications  capabilities  even  further? 


We  unify  them  with  the 


uilding  for  the  futi .  e  is  no  easy  task.  As  your  strategic  partner,  Unisys 
can  help  you  generate  new  revenue  with  our  knowledge  of  technology 
and  scalable  solutions  that  maximize  what  you  already  have.  In  fact,  9 
out  of  10  of  the  world’s  largest  telecommunications  companies  rely  on 
Unisys  to  grow  and  manage  their  business.  There’s  no  one  better  suited 
to  help  you  evolve  to  wireless  broadband,  multimedia  messaging  and 
other  next-generation  solutions.  With  Unisys,  getting  to  the  leading  edge 
isn’t  just  a  pipe  dream.  Visit  us  at  www.aheadforebi  ;iness.com. 
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There  was  a  particular  stroke  of  genius  early  in  this  brainstorming  session.  New  Microsoft®  Visio®  2002 
allows  you  to  quickly  and  easily  organize  your  ideas  and  present  a  clear-cut  plan  of  action.  Create 
crystal-clear  flowcharts,  timelines,  organizational  charts,  even  detailed  floor  plans,  all  in  an  intuitively 
designed,  easy-to-use  program.  With  Visio  your  ideas  become  easily  understood  solutions.  And  with  the 
flexibility  to  save  Visio  diagrams  as  Web  pages  or  to  use  them  in  Microsoft  Office  documents  and  e-mail, 
you  can  get  your  point  across  just  about  any  way  you  choose.  To  give  it  a  try,  visit  microsoft.com/visio 
or  go  to  Internet  Keyword:  Microsoft  Visio.  Software  for  the  Agile  Business. 
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Book  Reviews: 


Be  Forward-TBinking 
And  Master  Your 


Competitors 

Leverage  your  rivals’  strengths,  defy 
conventional  wisdom,  and  help  your 
employees  accept  change. 


Judo  Strategy:  Turning  Your  Competitors’ 
Strength  to  Your  Advantage,  by  David  B. 
Yoffie  and  Mary  Kwak  (Harvard  Busi¬ 
ness  School  Press,  239  pages,  $29.95). 
Anyone  who  has  studied  judo  or  other 
martial  arts  has  been  taught  to  utilize 
an  opponent’s  size  and  strength  to 
bring  him  down  instead  of  struggling 
with  him  using  a  similar  amount  of 
force.  Yoffie,  a  Harvard  Business 
School  professor,  and  Kwak,  a  research 
associate  at  Harvard  Business  School, 
advise  managers  to  beat  competitors  of 
all  sizes  using  three  judo  principles  — 
movement,  balance  and  leverage. 

Case  in  point:  In  one  chapter,  the  au¬ 
thors  point  to  the  success  of  RealNet¬ 
works  Inc.  and  how,  through  a  combi¬ 
nation  of  balance  and  vision,  the  com¬ 
pany  continues  to  deliver  85%  of  all 
streaming  media  content  to  the  indus¬ 
try  five  years  after  its  launch,  despite 
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the  efforts  and  resources  of  its  gargan¬ 
tuan  rival,  Microsoft  Corp. 

Yoffie  and  Kwak  successfully  follow 
through  on  a  simple  approach  that  de¬ 
livers  useful  advice  for  any  manager. 

—  Thomas  Hoffman 

The  Forward-Focused  Organization:  Vision¬ 
ary  Thinking  and  Breakthrough  Leadership 
to  Create  Your  Company’s  Future,  by 

Stephen  C.  Harper  (Amacom  Books,  258 
pages,  $19.56).  Harper,  a  management 
professor  at  the  University  of  North 
Carolina  at  Wilmington  and  president 
of  a  consulting  firm,  writes  about  the 
latest  strategies  to  help  corporate  man¬ 
agers  be  forward-looking.  He  offers 
ideas  on  fostering  speed  and  agility, 
adapting  the  best  entrepreneurial 
thinking,  and  cultivating  strategic  man¬ 
agement  by  having  leaders  set  a  goal  of 
where  they  want  the  company  to  be  in 
a  few  years,  then  working  back  from 
that  target  date  to  determine  how  to 
get  there.  Make  note  of  these  two  ap¬ 
pendices:  100  Ways  to  Self-Destruct  as 
a  Leader  and  100  Ways  to  Drive  Away 
Your  Customers. 

—  Rick  Saia 

The  Agenda:  What  Every  Business  Must  Do 
to  Dominate  the  Decade,  by  Michael  Ham¬ 
mer  (Crown  Business,  264  pages, 

$27.50).  It  has  been  eight  years  since 
Hammer  published  his  best-selling 
business  tome.  Reengineering  the  Cor¬ 
poration,  which  ultimately  sent  thou¬ 
sands  of  managers  scrambling  to  try  to 
reform  their  organizations’  business 
operations.  This  time,  Hammer 
preaches  that  the  recent  market  de¬ 
cline  from  the  go-go  1990s  is  forcing 


THE 


What  Every  Business  Must 
Do  to  Dominate  the  Decade 


businesses  to  “get  serious”  and  suc¬ 
ceed  by  thinking  like  their  customers. 

Though  Hammer  is  hardly  the  first 
management  consultant  to  jump  on  the 
“think  customercentric”  bandwagon, 
his  keen  insights  offer  valuable  lessons 
for  today’s  earnings-focused  managers. 

—  Thomas  Hoffman 

Build  Your  Own  Garage:  Blueprints  and 
Tools  to  Unleash  Your  Company’s  Hidden 
Creativity,  by  Bernd  H.  Schmitt  and  Lau¬ 
ra  Brown  (The  Free  Press,  196  pages, 
$19.60).  The  “bizz”  and  the  “buzz.”  The 
first  comprises  the  fundamental  rules, 
procedures  and  principles  of  manage¬ 
ment  action.  The  latter  is  a  motivation¬ 
al  atmosphere  of  excitement,  job  satis¬ 
faction  and  fun  to  enable  your  organi¬ 
zation  to  become  a  creative  power¬ 
house.  The  authors  contend  that  com¬ 
panies  shouldn’t  focus  too  much  on 
just  one  of  those  areas. 

Schmitt  and  Brown  use  the  idea  of  a 
“garage”  as  a  place  where  creativity 
and  innovation  are  the  highest  priori¬ 
ties,  a  place  where  bureaucracy  is 
banished  and  where  ideas  are  quickly 
implemented. 

—  Rick  Saia 

Managing  Business  Change  for  Dummies, 

by  Beth  L.  Evard  and  Craig  A.  Gipple 
(Hungry  Minds  Inc.,  340  pages,  $15.39). 


It’s  common  for  companies  to  change, 
and  only  human  to  resist  it.  But  as  a 
manager,  you  play  a  crucial  role  when 
your  company  is  going  through  a  trans¬ 
formation. 

Evard,  an  organizational  psycholo¬ 
gist,  and  Gipple,  a  change  management 
and  quality  consultant,  offer  advice 
and  suggest  questions  to  ask  yourself 
when  employees  resist  change,  when 
they  need  information  and  when 
change  stresses  them  out. 

—  Rick  Saia 

The  Accidental  Project  Manager:  Surviving 
the  Transition  from  Techie  to  Manager,  by 

Patricia  Ensworth  (John  Wiley  &  Sons, 
Inc.,  269  pages,  $34.99).  If  you  were 
ever  a  programmer  who  was  suddenly 
“volunteered”  to  run  a  complex  IT 
project  with  little  or  no  project  man¬ 
agement  experience,  you  know  that 
standards-based  disciplines  such  as  Six 
Sigma  and  the  Capability  Maturity 
Model  will  only  get  you  so  close  to  the 
finish  line.  So  does  Ensworth.  The  vice 
president  of  systems  development  and 
manager  of  software  quality  assurance 
at  Moody’s  Investors  Service  in  New 
York,  she  has  20  years  experience  in 
software  development. 

Unlike  tech  manuals  that  might 
guide  you  with  gobs  of  quality  assur¬ 
ance  methodologies,  Ensworth’s  book 
provides  lots  of  hands-on  advice  for 
newbie  project  managers,  like  how  to 
contend  with  co-worker  quarrels  or 
amorous  liaisons  that  might  develop 
during  a  project.  Still,  the  book  has 
plenty  of  procedural  guidance  about 
how  to  tackle  more  mundane  but  nec¬ 
essary  tasks  such  as  performance  test¬ 
ing  and  documentation. 

—  Thomas  Hoffman 
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Introducing  Computerworlds  Knowledge  Centers. 
All  the  information  you  need.  All  in  one  place. 


Are  you  tired  of  scouring  the  Web  to  find  the  IT 
resources  you  need  to  do  your  job?  Then  go  to 
Computerworld  online  at  www.computerworld.com. 

It’s  the  one  place  where  you  can  find  the 
insightful,  award-winning  editorial  found  in 
Computerworld  —  plus  links  to  a  wealth  of 


VISIT  COMPUTERWORLD’S 
KNOWLEDGE  CENTERS: 


CRM 

Application/ 

Web  Development 

Data  Management 

E-Commerce 

XSP 

ERP/Supply  Chain 
Hardware 


IT  Management/Leadership 

Mobile/Wireless 

Networking 

Operating  Systems 

Security 

Storage 

Website  Management 


Subscribe  to  more  than  twenty  online  newsletters. 
Buy  business  and  IT  books.  Discuss  IT  issues  with 
peers  and  experts.  Check  out  upcoming  IT  events 
and  training  programs.  Even  submit  RFPs  to  find 
the  IT  resources  you  need  to  succeed. 

Better  yet,  it’s  all  organized  by  the  most  popular 


quality  tools. 


areas  of  interest  in  IT.  So  you  can  quickly  find  what 


At  Computerworld’s  Knowledge  Centers  you  can  catch  up  on  the  latest  you  need  to  do  your  job.  Go  to  www.computerworld.com/knowledge_centers 


breaking  news.  Search  for  white  papers  on  a  wide  range  of  technical  topics.  now.  The  search  is  over. 


www.computerworld.com/knowledge_centers 


COMPUTERWORLD 

INFORMATION  SERVICES  FOR  IT  LEADERS 


BUSINESSMANAGING 


COMPUTERWORLD  October  22,  2001 


AGGREGATION: 

HOSTED 

TODAY 

IN-HOU& 

TOMORROW 

While  most  banks  that  have  implemented 
aggregation  services  over  the  past  year  are 
using  a  hosted  model,  a  growing  number  of 
them  are  expected  to  turn  to  in-house 
connections  as  the  technology  matures  and 
standards  emerge.  By  Lucas  Mearian 


WHILE  ACCOUNT  ag¬ 
gregation  is  one  of 
the  hottest  services 
being  offered  online 
by  financial  services 
firms,  few  organizations  are  managing 
the  technology  themselves.  Most  are 
opting  to  use  hosted  models  just  to  get 
their  service  up  and  running  quickly. 

But  as  aggregation  technologies  ma¬ 
ture  and  standards  emerge,  more  banks 
will  likely  look  to  bring  the  systems  in- 
house  to  avoid  perennial  user  fees  and 
to  increase  control  and  scalability. 

RBC  Financial  Group  in  Toronto  re¬ 
cently  started  piloting  its  aggregation 
service  with  a  select  group  of  high-use, 
online  customers  after  performing  a 
two-month,  in-house  test  of  the  ser¬ 
vice.  The  service  itself  is  being  hosted 
by  CashEdge  Inc.  in  Milpitas,  Calif.,  the 
same  company  that  hosts  the  firm’s  on¬ 
line  banking  service. 

“We  weren’t  really  comfortable  of¬ 
fering  our  customers  a  service  on  a 
third-party  site  where  we  were  disin¬ 
termediated  and  [the]  third  party 
might  have  access  to  our  customer  in¬ 
formation,”  said  Tom  Wolf,  RBC’s  se¬ 
nior  vice  president  of  e-business.  But 
with  CashEdge  hosting  both  the  bank’s 
aggregation  service  and  its  online 
banking  activities,  he  says,  “you’re  be¬ 
hind  the  same  authentication  process 
you  have  for  our  online  banking.” 

In  the  first  two  days  that  RBC’s  ag¬ 
gregation  service  was  online,  320  out 
of  1,000  customers  indicated  that  they 
wanted  to  try  it.  By  the  end  of  August, 
that  number  had  jumped  to  420. 

Farming  It  Out 

The  vast  majority  of  financial  ser¬ 
vices  firms  lean  upon  aggregation  ser¬ 
vice  providers  such  as  Yodlee  Inc.,  SI 
Corp.  or  CashEdge  to  host  their  aggre¬ 
gation  sites.  With  about  80%  of  the 
market,  Redwood  City,  Calif.-based  Yo¬ 


dlee  is  the  aggregation  industry’s  800- 
pound  gorilla. 

Ray  Graber,  a  commercial  banking 
analyst  at  TowerGroup  in  Needham, 
Mass.,  says  banks  overcame  their 
squeamishness  about  the  security  of 
hosted  sites  and  began  jumping  into 
aggregation  through  service  providers 
because  they  feared  being  left  behind 
as  the  industry  began  adopting  the 
technology. 

“My  sense  is  that  long  term,  as  ag¬ 
gregation  grows,  it  will  be  available 


from  all  technology  providers  as  an 
on-site  service,”  Graber  said. 

James  Van  Dyke,  research  director  at 
Jupiter  Research  in  New  York,  says  the 
hosted  aggregation  model  is  still  the 
most  economical  and  fastest  way  for 
most  financial  services  firms  to  deliver 
the  service  to  customers.  “My  view  is 
the  ASP  model  works  fine  for  general- 
purpose  financial  institutions  —  banks 
and  other  companies  where  wealth 
management  is  not  the  priority.  It’s 
quick  and  relatively  painless,  and  they 


WHAT  IS  IT? 


Financial  aggregation  is  a  technique  used 
by  banks  and  other  financial  services 
firms  to  gather  customer  data  from  mul¬ 
tiple  sources,  such  as  savings,  credit 
card  and  brokerage  accounts,  and  con¬ 
solidate  that  information  at  a  single 
Web  site.  The  goal  is  to  use  that  data  to 
cross-sell  additional  products,  such  as 
home  mortgages  or  credit  cards. 


can  say  we  have  it,”  Van  Dyke  says. 
“[But]  if  somebody  wants  to  make  it  a 
core  part  of  their  offering,  they  should 
look  at  on-site  models.” 

That’s  one  of  the  reasons  why  Tom 
Cable,  chief  technology  officer  at  Net- 
Bank  Inc.  in  Alpharetta,  Ga.,  chose  to 
develop  an  in-house  aggregation  ser¬ 
vice  based  on  technology  from  Palo 
Alto,  Calif. -based  Teknowledge  Corp. 

Cable  says  that  by  integrating  the 
system  with  the  bank’s  current  online 
technology,  it  should  be  cheaper  for 
the  bank  to  host  the  system  itself  over 
the  long  haul  because  his  company 
won’t  have  to  pay  per-use  or  monthly 
fees  that  it  would  have  to  pay  under  a 
hosted  model. 

NetBank,  which  claims  to  be  the 
largest  online-only  bank  with  $2.2  bil¬ 
lion  in  deposits  and  230,000  accounts, 
used  a  clustered  server  architecture  to 
build  a  database  to  house  all  of  the  ag¬ 
gregated  information  and  to  run  a 
screen-scraping  function,  which  gath¬ 
ers  customer  account  information 
from  other  firms’  Web  servers. 

“We  went  this  route  because  it 
would  give  us  better  integration  with 
our  Internet  package  instead  of  just 
linking  to  someone  else’s  site,”  says  Ca¬ 
ble.  Besides,  he  adds,  “it  gives  us  more 
control.  And  we  don’t  have  to  worry 
about  a  third  party  having  that  infor¬ 
mation  and  what  they  may  do  with  it 
without  our  permission.”  I 


SCREEN-SCRAPING  ACROSS  THE  WEB 


A  customer  requests  account  information, 
entering  the  user  name  and  password  established 
previously  with  his  financial  service  provider. 


CUSTOMER 


FINANCIAL  SERVICE 
_ PROVIDER 


AGGREGATOR 


The  financial  services  company  will  use  this  information  to 
determine  potential  needs  of  customers  and  to  cross-sell 
products  such  as  mortgage  refinancing  or  credit  cards. 


With  direct  connections  to  Web  servers  through  firewalls 
at  other  financial  service  providers,  the  aggregator  is 


able  to  access  the  customer's  accounts. 


Savings, 
checking, 
mutual  funds, 
stock  trading 


FINANCIAL  SERVICE 
_ PROVIDER 


WEB  SERVER 


CUSTOMER 

ACCOUNTS 


An  intelligent  agent  collects  data  from  various  accounts  in  a  process 
called  screen-scraping.  The  aggregator  then  assembles  the  requested 
data  on  a  spreadsheet  for  the  customer  to  view  or  manage. 
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infrastructure:  it  starts  with  you. 

When  you  left  the  office  last  night,  you  worked  for  a  Midwest-based  enterprise 
humming  nicely  along  with  ten  accounts. 

When  you  walked  in  this  morning,  you  were  greeted  by  an  e-mail  announcing 
that  you  just  landed  a  new  piece  of  business— which  happens  to  be  bigger  than  those 
same  ten  accounts  combined. 

What's  at  the  top  of  today's  to-do  list?  Figure  out  how  to  expand  your  supply 
chain  and  create  distribution  channels  to  service  all  of  your  client's  retail  locations  around 
the  world.  And  could  you  do  it  by  tomorrow,  thank  you? 

Hopefully,  you've  got  an  infrastructure  that's  built  on  technology  that  works  around 
your  needs,  not  the  other  way  around.  It  should  be  standards-based,  so  you're  limiting 
your  risk.  Adaptable,  so  you  can  quickly  adjust  to  change.  Reliable,  so  you're  up  and 
running  without  a  hitch. 

At  we  engineer  infrastructure  that  starts  with  you— your  business,  your  issues, 
your  opportunities.  So  you  can  easily  respond  as  your  business  expands,  contracts  or  takes 
off  in  new  directions. 

Servers  that  are  designed  to  address  the  critical  nature  of  an  always-on  Internet 
infrastructure.  Software  that  puts  your  entire  network  within  easy  reach  of  your  keyboard. 
Storage  that  enables  you  to  transparently  scale  your  capacity.  Service  professionals  to 
help  you  quickly  design  and  deploy  flexible  solutions  and  infrastructures.  As  well  as  the 
support  resources  to  help  keep  them  running  24/7 

HP  infrastructure  solutions  are  based  in  the  real  world  of  business.  Because  the 
last  time  we  checked,  that's  where  we  all  work.  Call  1.800.HPASKME,  ext.  246.  Or  visit 
hp.com/go/infrastructure. 


Chances  are,  we  had  something  to  do  with  it.  Fact 
is,  98  out  of  the  FORTUNE  100  count  on  business 
intelligence  solutions  from  SAS  to  explore  infor¬ 
mation,  better  understand  customer  and  supplier 
relationships,  predict  behavior,  and  unlock  hidden 
opportunities.  Today,  SAS  is  leading  the  industry 
in  bringing  this  same  level  of  intelligence  to  the 
world  of  e-business.  With  e-Intelligence  from 
SAS,  you  can  capture,  analyze  and  react  to  data 
gathered  at  any  point  of  contact.  And  then  just  as 
quickly  disseminate  new  findings  to  lywhere 
they’re  needed  across  your  extended  enterprise. 
To  get  the  answers  you’re  searching  for,  call  us 
today  at  1-800-727-0025  c  stoj  bywww.sas.com. 


The  Power  to  Know 


SAS  atxl  all  other  SAS  Institute  Inc  product  or  service  names  are  registered  trademarks  or  trademarks  o!  SAS 
Institute  Inc  m  the  USA  and  other  countries  ®  indicates  USA  registration  ©  2001  SAS  Institute  Inc  35609US  0600 
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BUSINESSCAREERS 


WORKSTYLES 

Helping  to  Map 
The  Code  of  Life 


Customer  base:  Pharmaceuticals 
companies  and  university,  medical 
and  government  research  centers 

Mission-critical  systems:  “Our  super¬ 
computing  system,  which  includes 
the  servers,  the  storage  and  the 
computer  farm  [800  interconnected 
Compaq  Alpha-based,  64-bit  sys¬ 
tems,  each  of  which  can  perform 
more  than  250  billion  sequence 
comparisons  per  hour].  It’s  one  of 
the  largest  civilian  supercomputing 
centers  in  the  world. 

“We  have  a  strong  relationship 
with  corporate  IT  at  Applera  [Corp., 
Celera’s  parent  company],  so  we 
bridge  into  their  [back-office]  sys¬ 
tems.  Here,  the  focus  is  on  super¬ 
computing  and  local  enterprise  sys¬ 
tems,  like  desktop  systems,  [cus¬ 
tomer  relationship  management 
and]  sales  support.” 

How  did  IT  contribute  to  the  human 
genome  project?  “It  wouldn’t  have 
been  possible  to  [sequence  and  as¬ 
semble]  the  genome  so  quickly  with¬ 
out  our  systems.  We  did  it  in  nine 
months.  We  could  have  done  it  on 
laptops,  maybe,  in  a  few  hundred 
years.  We  have  a  very  powerful 
supercomputer  and  100TB  of  infor¬ 
mation  stored  on  disk.  That’s  larger 
than  the  distributed  storage  at  most 
classified  computing  complexes. 

“The  DNA  is  mechanically 
sheared  into  pieces  in  a  lab.  Then  we 
have  hundreds  of  DNA  sequencers 
that  analyze  the  pieces  and  decipher 
the  order  in  which  the  [chemical 
bases]  appear.  We  then  use  our 
supercomputer  and  proprietary 
algorithms  to  put  all  the  pieces  back 
together  and  see  what  the  genome 
looks  like.” 

What  does  it  take  to  work  in  this  type  of 
IT  environment?  “Agility  —  you  must 
be  able  to  respond  to  many  different 
requirements  as  they  arise  because 
our  business  is  research-driven,  and 
we  have  to  mobilize  resources  very 
quickly  based  on  what  our  scientists 
are  coming  up  with. 


“We  also  need  folks  who  can  un¬ 
derstand  and  manage  scale.  We  have 
over  a  terabyte  of  storage  in  a  single 
Oracle  database,  so  we’re  asking 
people  to  manage  systems  that  are 
one  to  two  orders  of  magnitude  larg¬ 
er  than  they’ve  ever  seen  before _ 

Someone  may  call  from  [research], 
and  we’ll  move,  without  blinking  an 
eye,  more  data  between  two  boxes 
than  exists  at  most  companies. 

“You  must  also  have  a  customer 


focus  —  you  have  to  understand  the 
user  and  their  requirements,  which 
are  driven  by  their  research  agenda 
and  the  online  information  business 
and  its  customers.  Finally,  we’ve 
proven  that  we  can  do  things  very 
fast  and  efficiently,  and  that  requires 
attention  to  quality.” 

Where  do  you  find  people  with  all  of 
those  attributes?  “Different  IT  envi¬ 
ronments  bring  different  character¬ 
istics  to  the  team.  From  the  academ¬ 
ic  environment,  we  get  a  level  of  cre¬ 
ativity  and  research  understanding. 
From  the  government  sector,  we  see 
people  who  have  been  exposed  to  the 
scale  —  the  largest  computers  in  the 
world  sit  in  government  agencies,  so 
they  have  an  appreciation  of  our  scale 
and  mission.  From  industry,  we  get 
the  attention  to  quality  and  customer 
focus.  So  we  draw  from  all  these  com¬ 


munities  to  build  our  IT  culture.” 

IT  training:  “Everyone  goes  to  a  ge¬ 
nomic  boot  camp,  a  quick-and-dirty 
two-day  session  to  learn  the  basics 
of  genomics.  In  IT  we  do  a  lot  of  on- 
the-job  training  because  there  aren’t 
a  lot  of  places  that  have  what  we 
have  in  terms  of  the  amount  of  data 
and  power.  To  us,  the  most  valuable 
form  of  training  is  collaboration 
with  other  sites  like  Sandia  [Nation¬ 
al  Laboratories]  or  Los  Alamos  [Na¬ 
tional  Laboratory]  —  we  share  expe¬ 
riences  in  running  systems  of  this 
scale,  and  that’s  where  we  get  the 
most  valuable  form  of  training.” 

Workday:  “That  can  vary  depending 
on  what  the  workload  is.  Typically, 
it’s  a  50-hour  week,  and  it  can  bub¬ 
ble  up  to  60  or  70  hours.  But  we’re  a 


7/24  shop,  so  the  hours  can  be  very 
flexible.” 

Dress  code:  “Yes,  we  wear  clothes. 
That’s  about  the  extent  of  our  dress 
code.” 

Little  perks:  “We  try  to  be  creative, 
and  to  celebrate  as  much  as  possible. 
We  have  crab  cake  dinners  and  ice 
cream  socials.  And  we  have  Nerf  ball 
battles.” 

Would  you  ever  go  back  into  a  more  tra¬ 
ditional  IT  environment?  “Once  you’ve 
been  to  Paris,  it’s  kind  of  hard  to  go 
back  to  the  farm.  It’s  difficult  to  find 
such  a  diverse  set  of  exciting  chal¬ 
lenges  as  we  have  here  —  something 
that  has  this  impact,  the  scale,  the 
algorithmic  challenges.” 

-  Leslie  Jaye  Goff 
lgoff@ix.netcom.com 


Celera  Genomics 

•  "  ■  Interviewee:  John  Reynders,  vice  president  of  information 
ppp*  systems 

^  . . . 

v'  Company:  Celera  Genomics  ( www.celera.com ),  the  company 

ldlfc.  that  mapped  the  human  genome 

Type  of  business:  Provider  of  genomic  and  biological  data 
and  software  tools  for  viewing,  browsing  and  analyzing  the  data 

Main  location:  Rockville,  Md. 

Number  of  IT  employees:  90 

Number  of  employees  (end  users):  800  internally;  information  systems  also 
supports  customers  of  the  company's  data  and  software 


SAS  helped 
Sprint  improve 
customer  retention 
and  save  a 
million  dollars. 
But  we’ll  let  them 
tell  you  all  about  it. 


Get  the  whole  story  and 
others  at  sas.com/3c 
or  call  us  at  1-800-727-0025. 


4S341US0901 


Storage  and  data  net 

Kfii x  /  a 

Information  is  s-ha 

Discover  all  that's  possible  on lle  loter 


unite 


globally. 


rnet. 


ition  and  Cisco  Powered  Network  are  registered 


©2001  Cisco  Systems,  Inc  All  o<inMH*«(|.  Cisicd,  Cisco  Systems,  the  Systems  logo,  rmwjffjjW 
trademarks  or  trademarks  ot  Cist  n  Systems,  Inc. 


It  SOLUTIONS  FOR  YOUR  NETWORK 


VPN/SECURITY 

+ 

STORAGE  NETWORKING  ► 

IP  TELEPHONY 

+ 

CONTENT  NETWORKING 

+ 

OPTICAL 

+ 

MOBILITY 

+ 

cisco.com/go/storagesolutions 


Now  you  can  make  storage  resources  available  anywhere  over  IP  by  establishing  a  system 
based  on  open  standards.  With  Cisco  storage  solutions,  you  can  consolidate  storage  resources 
over  your  existing  IP  network  —  enabling  you  to  save  money  while  deploying  and  managing 
the  most  demanding  storage  application.  With  Cisco  AVVID  enterprise  architecture,  you  can 


Cisco  Systems 


do  all  this  without  any  disruption.  This  standardized  enterprise  architecture  allows  you  to  seamlessly  integrate  voice,  video,  wireless. 


Empowering  the 
Internet  Generation” 


storage  and  data  applications  on  a  single,  scalable  network.  This  includes  new  and  existing  technologies  alike.  Whether  you're  building 


your  enterprise  network  or  extending  it  with  Cisco  Powered  Network  services,  take  advantage  of  the  tools  below  to  get  it  done  right. 


Recent  Articles 

White  Papers 

Storage  Networking  Webcast 

Cisco  Powered  Network 
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BUSINESS 


Dear  Career  Adviser: 


Ym  a  Cisco-certified  trainer  who's  interested 
in  getting  a  government  job.  The  paperwork 
seems  endless,  plus  I  understand  you  get  in  by 
knowing  someone.  Am  I  right? 

—  Insiders  Only 


Dear  Only: 

Insider  support  helps,  no  matter 
what  organization  you’re  applying  to. 

However,  both  Dennis  Damp,  author 
of  The  Book  of  U.S.  Government  Jobs 
(Seventh  Edition,  Brookhaven  Press, 
2000)  and  the  Quick  and  Easy  Federal 
Jobs  Kit,  Version  6.0  (Brookhaven 
Press,  2001),  and  Sharon 
Patterson,  a  marketing 
specialist  at  Federal  Re¬ 
search  Service  Inc.,  in  Vi¬ 
enna,  Va.,  point  out  that 
another  key  to  getting 
hired  by  Uncle  Sam  in¬ 
volves  acing  the  applica¬ 
tion  process. 

Written  tests  are  re¬ 
quired  for  perhaps  only 
one-fifth  of  government 
jobs.  To  survive  the  appli¬ 
cation  process,  you’ll  need 
to  go  to  school  to  tailor 
your  responses  to  the  key¬ 
words,  key  experiences 
and  education  requirements  listed  in 
each  job  description.  This  can  be  time- 
consuming  indeed. 

To  find  the  job  openings  themselves, 
go  to  www.federaljobs.net,  which  has 
links  leading  to  the  employment  op¬ 
portunities  pages  on  the  Web  sites  of 
about  150  federal  agencies. 

You  can  also  search  through  approx¬ 
imately  60%  of  the  jobs  available  in  the 
federal  government  via  the  Web  site  of 
the  U.S.  Office  of  Personnel  Manage¬ 
ment.  ( www.usajobs.opm.gov/a6.htm ). 

The  IT  occupational  job  codes 
you’re  looking  for  are  0334,  for  com¬ 
puter  specialist,  programmer/analyst; 
0854,  for  computer  engineer;  1550,  for 
computer  scientist;  and  0332,  for  com¬ 
puter  operator. 

For  a  subscription  fee,  you  can 
search  through  100%  of  available  fed¬ 
eral  listings  at  www.fedjobs.com. 

You  can  also  find  the  names  of  com¬ 
panies  that  have  been  awarded  govern¬ 
ment  contracts  by  reading  Federal 
Computer  Week  ( www.fcw.com ),  Gov¬ 


ernment  Computer  News  ( www.gcn . 
com)  and  Commerce  Business  Daily 
( http://cbdnet.access.gpo.gov/ ). 

II  Dear  Career  Adviser: 

I’ve  been  job-hunting  in  New  York 
with  absolutely  no  luck.  I  have  eight 

years  of  IT  experience  with 
a  focus  on  SAP  program¬ 
ming  doing  conversions  and 
interfaces. 

I  have  picked  up  other 
minor  skills,  including  SAP 
configuration,  creating 
Unix  scripts,  doing  analysis, 
creating  design  specs,  test¬ 
ing  and  project  manage¬ 
ment.  I  also  did  some 
HTML  and  JavaScript  cod¬ 
ing  for  a  design  phase.  I  had 
certification  in  Advanced 
Business  Application  Pro¬ 
gramming/4  track  in  1995, 
and  I  hold  a  master’s  degree 
in  MIS.  Before  I  switched  into  IT,  I  was  a 
certified  public  accountant. 

—  On  the  Bench 

Dear  Bench: 

The  problem  isn’t  your  SAP  experi¬ 
ence  as  much  as  the  current  state  of 
mind  in  the  city,  says  Joe  Sabrin,  presi¬ 
dent  of  eHire.com  Inc.  in  New  York. 
Some  people  are  just  now  returning  to 
work  after  the  Sept.  11  terrorist  attacks, 
and  many  projects  are  on  hold. 

Most  current  hiring  has  to  do  either 
with  rebuilding  hardware  and  network 
infrastructure  or  with  reinforcing  dis¬ 
aster  recovery  procedures. 

After  a  time,  $20  billion  in  federal 
funds  will  begin  to  flow  into  the  re¬ 
gion,  notes  Sabrin,  and  jobs  will  open 
up  through  primary  contractors  and 
subcontractors. 

While  you  wait  for  jobs  to  open  up 
in  these  areas,  you  might  find  that 
your  CPA  holds  more  immediate  value 
than  your  SAP  credentials,  for  the  mo¬ 
ment  anyway.  I 


fran  quittel  is  an  expert 
in  high-tech  careers 
and  recruitment.  Send 
questions  to  her  at 

www.computerworld.com/ 

career.adviser. 


Contact  a  Certified  Partner. 


CUSTOMER  SATISFACTION 


visit 


cisco.com/go/certifiedpartner 


Implementing  new  technologies  and  getting  it  done 
right  the  first  time  is  now  more  critical  than  ever.  Each 
Certified  Partner  focuses  on  customer  satisfaction  with  the 
same  tools  Cisco  uses  to  track  satisfaction  and  pinpoint 
areas  of  improvement.  To  learn  more  or  locate  the 
partner  right  for  you,  visit  cisco.com/go/certifiedpartner 


Cisco  Systems 


Empowering  the 
Internet  Generation” 


Discover  all  that's  possible  on  the  Internet;' 


©2001  Cisco  Systems,  Inc.  All  rights  reserved.  Discover  All  That's  Possible  on  the  Internet  and  Empowering 
the  Internet  Generation  are  service  marks,  and  Cisco,  Cisco  Systems  and  the  Cisco  Systems  logo  are  registered 
trademarks  of  Cisco  Systems,  Inc.  and/or  its  affiliates  in  the  U.S  and  certain  other  countries. 
The  use  of  the  word  "partner"  does  not  imply  a  partnership  relationship  between  Cisco  and  any  other  company. 


SO  RELIABLE, 
IT’S  THE 
LEADING 
DATABASE 
IN  HEALTHCARE 


More  hospitals  around  the  world  are  running 
their  "life-or-death"  applications  on  Cache 
than  on  any  other  database  system. 

With  proven  reliability  like  this,  you  should 
consider  Cache  for  your  critical  applications. 

With  its  lightning  speed  and  massive  scalability, 
the  performance  of  Cache  makes  it  a  perfect 
match  for  any  enterprise,  in  any  industry,  with  a 
requirement  for  fast  transaction-processing 
applications  capable  of  scaling  to  tens  of 
thousands  of  users. 

Cache  uniquely  combines  robust  object  and 
relational  technologies,  coupled  to  a  multi¬ 
dimensional  data  engine.  Plus,  it  includes  a  rapid 
Web  application  development  environment. 

Cache  is  backed  by  24x7  support  from 
InterSystems  -  a  leader  in  high  performance 
databases  for  23  years,  with  4,000,000  users* 
worldwide  in  healthcare,  financial  services  and 
other  industries. 


InterSystems  f 

£  CACHE 

Make  Applications  Faster 

Download  Cache  for  free  or  request  it  on  CD  at  www.lnterSystems.com 

*  InterSystems'  database  technology  is  used  by  Ameritrade,  Hitachi,  Johns  Hopkins,  Kennedy  Space  Center. 
Paine  Webber,  Pepsi  Cola,  Prudential  Insurance  Co.,  Shell,  U.S.  Army,  World  Bank  and  other  successful  enterprises. 
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TECHNOLOGY 


THIS  WEEK 


XP  SECURITY 


With  the  release  of  Windows  XP, 
Microsoft  may  finally  be  getting 
serious  about  security.  But  are  the 
changes  enough?  PAGE  50 


BIG  STEP  FOR  SIP 

Microsoft  has  built  support  for  the 
Session  Initiation  Protocol  into 
Windows  XP.  SIP  has  the  potential 
to  help  users  engage  in  cost-effec¬ 
tive,  real-time  communication  over 
a  variety  of  devices.  PAGE  52 


QUICKSTUDY 

Knowledge  management  is  the  art 
of  collecting  organizational  data 
and  turning  it  into  usable,  acces¬ 
sible  information.  PAGE  56 


SECURITY  JOURNAL 

The  recent  terrorist  attacks  prompt 
security  manager  Mathias  Thur¬ 
man  to  conduct  an  internal  secur¬ 
ity  review  that  turns  up  new  con¬ 
cerns.  PAGE  58 


EMERGING  COMPANIES 

Infoteria’s  e-business  tools  support 
RosettaNet  XML  standards  to  ease 
supply  chain  transactions.  The 
product  has  been  well  received, 
but  its  success  depends  on  users’ 
acceptance  of  RosettaNet.  PAGE  60 


NICHOLAS  PETRELEY 

The  Cost  of  Free  US 

I  KNOW  IT  HAS  BEEN  WEEKS,  but  I’m  still  reeling  from  the  news.  Earlier 
this  month,  Gartner  Inc.  strongly  recommended  “that  enterprises  hit 
by  both  Code  Red  and  Nimda  immediately  investigate  alternatives  to 
IIS  [Internet  Information  Server  ],  including  moving  Web  applica¬ 
tions  to  Web  server  software  from  other  vendors,  such  as  iPlanet  and 
Apache,”  ( www3.gartner.com/displaydocument?doc_cd=10103 ). 


Gartner  has  some  fine  people  and  produces  some 
excellent  data,  but  the  outfit  always  struck  me  as  one 
that  looked  at  the  world  through  Microsoft-colored 
glasses.  Perhaps  Gartner  has  finally  seen  the  light. 

Or  maybe  this  was  payback  for  having  bought  into 
the  success  of  Windows  CE,  Zero  Administration 
Windows  and  the  Net  PC.  Regardless,  I  was  shocked. 

Microsoft’s  official  response  could  be  paraphrased 
as  “we’re  no  worse  than  any  of  the  alternatives.” 
Normally,  I  would  say  this  was  an  atypically  anemic 
example  of  spin  for  Microsoft,  but  the  quality  of  PR 
coming  from  the  Redmond  damage  control  squad 
has  deteriorated  dramatically  over  the  past  couple  of 
years.  I’m  betting  it’s  sleep  deprivation  from  having 
their  pagers  beep  nearly  around  the  clock. 

“They  stink,  too”  is  no  excuse  for  providing  a 
shoddy  product,  even  if  it  were  true.  But  it  happens 
to  be  blatantly  false.  I  don’t  know  about  iPlanet,  but 
Apache  has  had  an  excellent  record  compared  with 
Microsoft  IIS. 

See  for  yourself.  If  you  visit  SecurityFocus  and 
look  up  Apache  Group  in  the  security  alerts,  you’ll 
get  a  list  of  the  last  20  known  vulnerabilities.  You 
can  cross  off  eight  of  these  entries  because  the  prob¬ 
lems  stem  from  the  server-side  scripting  languages 
that  you  add  to  Apache,  not  Apache  itself.  These 
add-ons  are  also  available  for  Windows  and  IIS,  so 
one  has  to  either  add  these  to  the  list  of  IIS  vulnera¬ 
bilities  or  place  the  blame  where  it  belongs  —  on 
the  add-on  package. 

Of  the  remaining  12  vulnerabilities,  one 
problem  is  specific  to  running  Apache  on 
Windows,  and  two  more  are  confined  to 
Apache  on  the  Macintosh.  Barring  pure 
stupidity  on  the  part  of  an  administrator, 
only  the  Windows-specific  vulnerability 
was  particularly  dangerous. 

If  you  look  at  the  list  of  Microsoft  alerts 
on  the  same  site,  only  seven  of  the  last  20 
alerts  are  IIS-related.  IIS  has  to  compete 
for  space  with  the  security  holes  in  other 
Microsoft  products,  such  as  Exchange, 

Proxy  server  and  Windows  itself. 


The  vulnerabilities  in  this  list  are  more  likely  to 
lead  to  grave  consequences,  but  it’s  not  just  the  dif¬ 
ferences  in  severity  that  I  find  striking.  It’s  the  time 
it  took  to  fill  up  20  entries.  The  two  bottom  entries 
in  the  Apache  list  are  dated  September  1999.  The  two 
bottom  entries  in  the  Microsoft  list  are  dated  August 
2001.  Two  months.  Two  years.  You  do  the  math. 

If  that  isn’t  enough  to  get  you  to  switch,  then 
consider  Microsoft’s  own  reasoning.  It  claims  that 
there  are  so  many  Windows-specific  viruses, 
worms  and  Trojan  horses  not  because  Windows  is 
so  insecure,  but  because  Windows  has  the  largest 
market  share. 

According  to  the  Netcraft  Web  survey  (www. 
netcraft.co.uk/surve y),  Apache  runs  about  60%  of 
Internet  Web  sites.  About  28%  are  running  a  flavor 
of  Microsoft  IIS,  which  includes  every  Joe  Blow 
with  a  cable  modem  running  Windows  9x  and  the 
Microsoft  Personal  Web  server.  So,  if  the  problem 
is  market  share  and  not  bad  software,  then  why  over 
a  five-day  period  did  my  Web  servers  log  35,000 
Nimda  and  Code  Red  probes  that  exploit  IIS- 
specific  weaknesses,  but  not  a  single  probe  related 
to  Apache? 

Microsoft  fans  will  no  doubt  point  out  that  al¬ 
though  the  Netcraft  survey  says  that  Linux  is  grow¬ 
ing  faster  than  Windows,  it  also  says  that  in  terms 
of  actual  machines  running  Web  sites,  50%  of  them 
run  Windows.  Linux  takes  second  place,  with  30%. 

Malicious  software  probes  IP  addresses, 
not  machines,  so  it’s  a  stretch  to  say  that 
this  proves  Microsoft’s  point. 

But  even  if  one  could  win  that  argu¬ 
ment,  I’m  not  sure  I’d  trot  out  these 
figures  in  defense  of  IIS.  Sooner  or  later, 
someone’s  going  to  wonder  why  it  takes 
50%  of  the  machines  on  the  Internet  to 
run  28%  of  the  Web  sites.  On  the  other 
hand,  it  does  prove  that  Microsoft  was 
right  about  one  thing:  the  hidden  costs  of 
free  software.  Getting  IIS  free  with  Win¬ 
dows  obviously  doesn’t  mean  it  won’t  cost 
you  in  the  long  run.  I 


NICHOLAS  PETRELEY  is  a 

computer  consultant  and 
author  in  Hayward,  Calif. 
He  can  be  reached  at 

nicholas@petreley.com. 


HEN  WINDOWS  XP  IS  RELEASED, 
soon  all  hell  will  follow.  New 
zombies  and  nanobots  are 
waiting  to  exploit  vulnerabili¬ 
ties.  Be  warned  ...”  When  an 
Australian  hacker  identified  only  as  “Z”  sent  this 
e-mail  message  to  Computerworld  on  Aug.  7,  he  was 
referring  to  a  controversial  paper  claiming  that 
hackers  will  exploit  weaknesses  in  Microsoft 
Corp.’s  new  Windows  XP  operating  system  to  turn 
PCs  into  an  unwitting  army  of  denial-of-service 
(DOS)  attack  zombies. 

But  closer  inspection  suggests  otherwise,  accord¬ 
ing  to  users  and  analysts.  So  far,  those  zombie  bots 
in  Z’s  rant  are  nowhere  to  be  found. 

Despite  several  potential  vulnerabilities  raised  in 
the  past  few  months  by  security  analysts  and  priva¬ 
cy  advocates,  beta  testers  have  been  un¬ 
able  to  find  any  serious  security  threats 
in  Windows  XP.  To  the  contrary,  “with 
Windows  XP,  Microsoft  has  at  least  fixed 
the  sins  of  their  past,  which  is  more  than 
I  can  say  for  other  operating  systems,”  says  John 
Pescatore,  senior  security  analyst  at  Gartner  Inc.  in 
Stamford,  Conn. 

Not  only  do  analysts  and  beta  testers  generally 
praise  Microsoft  for  repairing  past  security  mis¬ 
takes  that  riddled  Windows  9x  and  NT  machines, 
but  they  also  feel  that  XP’s  new  embedded  security 
features,  particularly  the  ability  to  set  privileges 
and  an  embedded  firewall,  will  go  far  in  protecting 
novice  users  from  themselves  and  one  another. 

And,  in  the  case  of  XP  Professional,  these  same  se¬ 
curity  features  can  be  centrally  configured  to  follow 
corporate  security  policies  by  groups  and  locations. 

However,  some  IT  professionals  aren’t  convinced 
that  Microsoft  has  committed  to  a  more  secure  op¬ 
erating  system.  They  cite  possible  vulnerabilities 
with  raw  sockets  and  the  Remote  Assistance  feature, 
and  privacy  concerns  over  built-in  support  for  the 
Passport  personal  information  management  service. 


The  Raw  Deal 

Last  summer,  Steve  Gibson,  president  of  Gibson 
Research  Corp.,  a  security  and  privacy  software 
and  Web  publisher  in  Laguna  Hills,  Calif.,  published 
a  paper  ( http://grc.com/dos/winxp.htm )  accusing 
Microsoft  of  opening  a  new  “back  door”  into  Win¬ 
dows  by  building  raw  sockets  support  into  XP. 


“Raw  sockets  means  raw  access  to  the  Internet. 
And  the  problem  of  malicious  agents  getting  into 
people’s  computers  and  launching  DOS  attacks 
with  spoofed  packets  goes  up  dramatically  with 
use  of  raw  sockets,”  he  says. 

Because  they  skirt  traditional  TCP/IP  protocols, 
hackers  can  use  raw  sockets  to  generate  TCP 
packets,  and  it’s  impossible  for  receiving  networks 
to  determine  if  those  packets  are  legitimate. 
There’s  no  way  to  block  them,  Gibson  explains, 


because  that  would  mean  blocking  all  TCP  pack¬ 
ets.  That  would  effectively  drop  all  inbound  traffic. 

Raw  sockets  are  nothing  new.  Various  flavors 
of  Unix  and  Linux  run  raw  sockets,  as  does  Win¬ 
dows  2000.  “But  all  operating  systems  that  offer 
raw  sockets  deliberately  protect  the  access  to 
those  raw  sockets  by  requiring  the  highest  system 
privileges  possible,”  Gibson  says. 

Windows  XP,  however,  installs  with  full  admin¬ 
istrative  permissions  turned  on,  meaning  that 
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novice  users  have  access  to  kernel-level  privileges, 
Gibson  says. 

True,  says  Mark  Croft,  lead  product  manager  at 
Microsoft’s  Windows  division.  XP  ships  with  full 
administrative  privileges  for  application  compatibil¬ 
ity  reasons.  However,  Croft  and  others  say  it  would 
be  hard  to  launch  a  DOS  attack  from  an  XP  machine 
because  the  attacker  is  unlikely  to  get  a  malicious 
program  onto  the  machine  in  the  first  place. 

That’s  because  XP  ships  with  the  embedded  fire¬ 
wall,  called  Internet  Connection  Firewall,  set  at  the 
highest  security  setting  to  deny  executables.  And 
the  firewall  hides  the  IP  address  of  the  machine.  In 
addition,  once  XP  is  installed,  users  can  drop  admin¬ 
istrative  privileges  by  selecting  the  “limited  account” 
feature  in  the  Control  Panel. 

“The  big  problem  with  home  users  running  high- 
bandwidth  connections  is  that  everyone  can  access 
the  hard  drive.  But  [the]  WinXP  firewall  is  designed 
to  block  people  from  accessing  services  running  on 
the  machine,”  says  H.D.  Moore,  senior  vulnerability 
research  analyst  at  Digital  Defense  Inc.,  a  security 
consultancy  in  San  Antonio.  “The  firewall  default 
setting  is  ‘restrict  everything,’  which  is  impressive 
since  users  don’t  know  that  they  should  filter  exe¬ 
cutables.” 

Moore  is  also  impressed  by  XP’s  elimination  of 
default  administrative  passwords  that  wreaked  havoc 
on  Windows  9x  and  NT  machines.  If  implemented 
correctly,  XP’s  embedded  features  and  password 
improvements  will  block  the  most  common  ways 
malicious  code  gains  the  control  it  needs  to  turn 
machines  into  zombies. 

XP’s  firewall  is  in  no  way  designed  as  an  enterprise 
tool.  It’s  designed  for  home  users  with  broadband 
connections  who  aren’t  aware  of  the  need  for  a  fire¬ 
wall,  according  to  Microsoft.  It  also  lacks  outbound 
filtering  capability,  so  if  DOS  zombie  code  does 
somehow  get  loaded  onto  an  XP  machine,  an  out¬ 
bound  DOS  attack  couldn’t  be  stopped,  says  Ken 
Dunham,  a  computer  consultant  in  Nampa,  Idaho. 

“Windows  XP  will  lower  the  risk  of  infection 
against  malware  but  fails  miserably  once  malware 
penetrates  a  system,”  he  says.  “Trojans  that  manage 
to  get  past  XP’s  new  firewall  will  likely  have  a  heyday 
exploiting  outbound  communications.” 

For  additional  protection,  users  should  look 
for  outbound  filtering  firewalls  from  vendors  like 
Zone  Labs  Inc.  and  Symantec  Corp.,  both  of 


The  Keys  to  XP  Security 

Standard  XP  Security  features: 

Firewall:  The  Internet  Connection  Firewall  pro¬ 
vides  basic  packet  filtering  and  custom  settings 
for  ActiveX  controls  and  other  executable  files. 

The  default  setting  is  to  deny  all  executables. 

Remote  protections: 

►  Blank  passwords:  Accounts  with  blank  pass¬ 
words  can  no  longer  be  used  for  remote  log-in. 
►Guest  account:  All  remote  log-ins  are  forced 
into  a  guest  account  with  customizable  permis¬ 
sions.  XP  ships  with  the  guest  account  enabled 
and  the  default  permission  of  “severely  restrict¬ 
ed.”  (Guest  log-on  is  turned  off  by  default  in 
XP  Professional.) 

Privacy:  XP  supports  the  Platform  for  Privacy 
Preferences  (P3P)  user  privacy  settings  in  the 
browser.  It  ships  at  the  medium  setting,  which 
denies  cookies  that  don’t  have  a  compact 
P3P-compliant  header. 

Wireless  LANs:  Supports  802.11b  authenti¬ 
cation  and  encryption. 

Authentication  challenge  options:  Supports 
smart  cards  and  certificate  authorities. 

Security  warning  dialog  boxes:  These  pop 
up  when  the  user  attempts  to  enable  a  risky 
function  such  as  file  sharing. 

Additional  features  in  XP  Professional: 
Group  policy  objects:  Support  for  setting 
group  security  permissions  and  policy  with  tem¬ 
plates  for  Basic,  Compatible,  Secure  and  Highly 
Secure  environments. 

Virtual  private  networks:  Built-in  IPSec- 
encrypted  IP  tunneling  capability. 

Network  Monitor:  Detects  and  troubleshoots 
network  device  problems. 


Automated  System  Recovery:  This  system 
restoration  option  replaces  the  Emergency  Repair 
Disk  in  Windows  2000  Professional. 


which  offer  home  and  professional  versions. 

IT  managers  also  voice  concern  about  the  system’s 
new  Remote  Assistance  feature,  in  which  a  user  can 
invite  a  guest  to  log  on  to  the  machine  for  remote 
troubleshooting.  The  feature  uses  the  same  code  as 
Microsoft’s  terminal  server,  for  which  there  are  251 
vulnerability  and  patch  postings  on  the  CERT  Coor¬ 
dination  Center  Web  site. 

“[Remote  Assistance]  would  send  chills  down  the 
spine  of  anybody  interested  in  computer  security,” 
says  Byron  York,  a  computer  security  professional  at 
a  health  insurance  company  in  Michigan. 

But  there  are  several  checks  in  Remote  Assistance 
to  protect  users  from  themselves,  according  to  Croft. 
It’s  the  user  who  must  first  launch  the  Remote  Assis¬ 
tance  program  by  sending  a  trouble  ticket  (the  user’s 
encrypted  IP  address)  via  e-mail  or  instant  message 
to  the  remote  assistant.  Tickets  expire  in  24  hours  by 
default  (Croft  recommends  shortening  the  expiration 
to  an  hour  or  less.).  The  assistant  must  then  request 
permission  to  remotely  control  the  user’s  machine. 
The  user  can  accept  or  decline  the  request  and  can 
terminate  the  session  at  any  time. 

“The  user  would  have  to  be  double  dumb  to  get  in 
trouble  with  remote  assistance,”  Croft  claims. 

Microsoft  has  also  recently  responded  to  privacy 
concerns  over  its  Passport  information  service.  Now, 
the  only  feature  in  XP  requiring  the  use  of  Passport 
is  the  instant  messaging  program,  and  it  collects  only 
an  e-mail  address  and  pass  phrase,  Croft  says. 

New  Commitment? 

No  one  can  predict  what  new  types  of  exploits 
might  crop  up  in  the  months  and  years  after  XP 
ships.  But  for  now,  Microsoft  seems  committed  to 
a  more  secure  cyberspace,  say  users  and  analysts. 
Nonetheless,  Gartner’s  Pescatore  questions  whether 
Microsoft  will  remain  committed  down  the  line  or 
dump  the  security  focus  the  next  time  a  newer, 
sexier  technology  arises. 

“I’m  giving  Microsoft  a  50%  chance  that  they’re 
just  as  interested  in  better  processing  as  they  are  in 
marketing,”  he  says.  “But  it  all  hinges  on  whether  or 
not  they  can  change  the  Microsoft  culture  of  putting 
all  the  power  into  the  hands  of  the  user.”  ft 


-  Deborah  Radcliff 


Quick 
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For  a  list  of  resources  concerning 
Windows  XP  security,  please  visit  the 
Computerworld  Web  site: 

www.computerworld.com/q?23857 


;  substantial  security  enhancements, 
concerns.  By  Deborah  Radcliff 
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The  session  initiation  protocol 

(SIP)  may  not  be  a  familiar  technology 
term  to  many  corporate  users.  But  that 
might  change  now  that  Microsoft  Corp. 
has  built  support  for  the  lightweight 
protocol  into  the  Windows  XP  desk¬ 
top  operating  system  that  it  officially  launches  this 
week.  In  the  coming  months,  more  users  may  learn 
about  SIP  and  find  out  if  it  lives  up  to  its  promise 
to  bring  more  innovative  and  cost-effective  real¬ 
time  communications  to  their  companies. 

SIP,  which  became  an  Internet  Engineering 
Task  Force  (IETF)  standard  in  1999,  lets  a  user 
initiate  any  type  of  real-time  communication  session 
—  such  as  text-based  messaging,  voice,  video  or  even 
application-sharing  —  with  another  user  over  an  In¬ 
ternet  Protocol  (IP)  network.  Extensions  to  SIP  en¬ 
able  instant  messaging. 

Because  SIP  is  lightweight,  it  can  work  not  only 
with  PCs  but  also  with  other  devices,  such  as  mobile 
phones  or  personal  digital  assistants.  For  instance,  a 
PC  user  equipped  with  the  right  software  could  make 
a  voice  call  to  a  colleague  on  a  cell  phone. 

Vendors  are  already  making  SIP  phones  and  proxy 
servers,  but  Microsoft’s  support  is  “an  important 
milestone  in  terms  of  SIP  gaining  momentum,”  says 
Peter  O’Kelly,  an  analyst  at  Patricia  Seybold  Group 
Inc.  in  Boston. 

Microsoft  is  so  bullish  on  SIP  that  it’s  putting  a  SIP 
stack  and  application  programming  interface  into  its 


entire  Windows  family,  including  XP  for  PCs  and 
embedded  devices,  CE  for  the  Pocket  PC  and  the 
Windows  .Net  Server  operating  system,  says  Mark 
Lee,  a  lead  project  manager  with  the  company’s  Win¬ 
dows  team. 

In  June,  Microsoft  held  a  Windows  design  review 
event  that  drew  approximately  90  companies  to  learn 
about  implementing  SIP.  Microsoft  also  plans  to  sup¬ 
port  Internet-based  services  that  an  individual 
or  a  company  can  use  for  SIP-based  messaging: 
authentication  through  its  .Net  Passport  service 
and  presence  and  notification  through  its  .Net 
Messenger  service.  But  corporations  may  elect 
to  use  their  own  servers  to  authenticate  users,  main¬ 
tain  the  “presence”  information  about  when  and 
where  users  are  available,  and  enable  notification  be¬ 
tween  clients,  Lee  says. 

Reuters  Group  PLC  took  the  latter  approach,  work¬ 
ing  with  Microsoft  on  a  SIP-based  instant  messaging 
system  for  the  financial  community.  The  London- 
based  news  and  financial  information  provider  got 
the  idea  from  the  instant  messaging  services  that  are 
popular  among  consumers  and  corporate  users. 

“We  thought,  ‘Boy,  could  that  play  a  role  in  the  fi¬ 
nancial  market,’  ”  says  Lewis  Knopf,  managing  direc¬ 
tor  of  collaboration  services  at  Reuters.  But,  Knopf 
says,  his  company  recognized  that  existing  instant 
messaging  services  were  too  insecure  and  unreliable 
and  didn’t  provide  the  logging  mechanisms  that  fi¬ 
nancial  firms  need. 


How  SIP  Works 

The  Session  Initiation  Protocol  (SIP)  lets  one  user  initiate  any 
type  of  real-time  communication  session  -  such  as  text-based 
messaging,  voice,  video  or  even  application-shanng  -  with 
another  user  over  an  IP  network.  Here  s  an  example  of  how  a 
typical  corporate  scenario  might  work: 

Alice,  who  works  at  Company  A,  needs  to  speak  with 
Bob,  who  works  at  Company  B.  Each  company  has  a 
SIP  proxy  server,  and  Alice  and  Bob  can  be  using  any 
of  a  variety  of  clients,  including  a  PC  software  phone, 
or  softphone;  a  SIP  hardware  phone;  an  analog  phone 
with  an  adapter;  or  a  SIP-enabled  cell  phone. 

So,  working  with  Microsoft,  Reuters  approached  25 
financial  institutions,  including  Citigroup  Inc., 
Deutsche  Bank  AG  and  Morgan  Stanley  Dean  Witter 
&  Co.,  about  creating  a  high-security,  SIP-based  in¬ 
stant  messaging  service  and  contacts  directory.  Be¬ 
cause  Windows  XP  has  yet  to  gain  mainstream  usage, 
Reuters  must  distribute  to  its  partners  SIP-enabled 
clients  that  will  run  on  various  Windows  versions. 

On  the  back  end,  Reuters  is  using  a  SIP-enabled 
real-time  communications  server  from  Microsoft, 
which  has  yet  to  announce  the  server  software,  to  es¬ 
tablish  sessions  between  clients,  manage  communi¬ 
cations  and  track  presence  information,  Knopf  says. 
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1.  When  Bob  turns  on  his  client,  his 
phone  automatically  sends  a  register 
message  to  his  company's  SIP  proxy 
server.  The  register  message  tells  the  SIP 
proxy  server:  If  you  get  a  call  for  Bob, 
send  it  to  this  IP  address. 

2.  Alice  decides  to  call  Bob  via  her  PC 
softphone.  She  types,  “I  want  to  call  Bob 
at  Company  B.”  Her  invite  request  is  sent 
to  Company  A's  SIP  proxy  server. 

3.  Company  A’s  SIP  proxy  server  uses 
the  Domain  Name  System  to  look  up 
Bob's  domain,  and  the  invite  request  is  for¬ 


warded  to  Company  B’s  SIP  proxy  server. 

4.  The  Company  B  SIP  proxy  server  sees 
that  Alice  wants  to  call  Bob  and  forwards 
her  invite  request  to  Bob’s  IP  address, 
which  it  obtained  from  the  registration 
process. 

5.  Bob’s  phone  rings,  or  a  screen  pops 
up,  and  Bob  is  asked  if  he  wants  to  accept 
the  call.  His  affirmative  response,  called  a 
200  OK,  is  sent  to  his  company's  proxy 
server. 

6.  The  Company  B  SIP  proxy  server  for¬ 
wards  the  200  OK  to  Company  A’s  SIP 


proxy  server,  which  sends  the  200  OK  to 
Alice’s  client. 

7.  An  acknowledgment  message,  or 
ACK,  is  sent  directly  to  Bob’s  client.  Alice 
and  Bob  begin  communicating. 

Note:  If  either  party  used  an  ordinary 
telephone,  a  voice-over-IP  gateway 
would  be  needed  between  the  SIP  proxy 
server  and  the  client  device  for  the  con¬ 
nections  to  be  made. 

SOURCE:  JONATHAN  ROSENBERG,  CHIEF  SCIENTIST  AT 
DYNAMICSOFT  INC.,  CO-AUTHOR  OF  THE  SIP  SPECIFICA¬ 
TION  AND  FORMER  CO-CHAIRMAN  OF  THE  lETF’S  SIP 
WORKING  GROUP. 


Each  partner  also  must  have  a  SIP  proxy  server  to 
enable  messages  and  logging. 

Reuters  plans  to  launch  the  service  with  its  25 
partners  by  year’s  end  and  make  the  service  available 
to  the  rest  of  the  financial  industry  early  next  year. 
Knopf  notes  that  some  partners  and  client  compa¬ 
nies  may  elect  to  host  their  own  instant  messaging 
systems  and  connect  to  Reuters’  hosted  service  in 
federated  fashion. 

Right  now,  the  firms  are  piloting  text  messages,  but 
audio  and  video  may  be  added  in  the  future,  Knopf 
says.  “Our  main  worry  is  bandwidth,”  he  says. 

The  potential  for  SIP  is  just  starting  to  be  ex¬ 


plored.  Cambridge,  Mass.-based  Lotus  Software 
Group  and  Dulles,  Va.-based  America  Online  Inc.  re¬ 
cently  tested  an  extension  to  SIP  —  SIP  for  Instant 
Messaging  and  Presence  Leveraging  Extension  —  to 
get  their  proprietary  instant  messaging  services  to 
interoperate  on  a  server-to-server  basis. 

Some  companies  are  experimenting  with  replacing 
private  branch  exchange  telephone  systems  with  a 
single  network  that  carries  both  data  and  voice  traf¬ 
fic.  For  example,  telecommunications  software  de¬ 
veloper  Webley  Systems  Inc.  in  Deerfield,  Ill.,  and 
voice  application  network  provider  Tellme  Networks 
Inc.  in  Mountain  View,  Calif.,  are  in  the  process  of 


equipping  internal  users  with  SIP  phones. 

SIP  phones,  which  can  be  hardware  or  software, 
are  configured  with  SIP  proxy  addresses.  A  user  says 
the  name  of  the  individual  he  wants  to  call,  and  the 
request  is  sent  to  a  voice-activated  dialing  applica¬ 
tion  and  then  to  a  SIP  proxy  server,  which  routes  the 
call  to  a  voice-over-IP  gateway,  if  necessary,  and  then 
to  the  intended  recipient  —  even  if  the  recipient  is 
using  an  ordinary  telephone  connected  to  the  public 
switched  telephone  network. 

“A  lot  of  companies  are  finding  that  maintaining  a 
data  network  and  voice  network  is  a  very  expensive 
proposition,”  says  Don  Jackson,  vice  president  of  ad¬ 
vanced  telephony  at  Tellme  Networks.  “If  you’re  al¬ 
ready  going  to  put  in  a  data  network  for  the  PCs  on 
everyone’s  desktops,  why  not  make  the  network  do 
double  duty  and  provide  voice  access  as  well?” 

Since  new  SIP  proxy  servers  can  register  a  number 
of  devices  for  any  end  user,  users  have  the  advantage 
of  being  able  to  indicate  their  preferred  choices  for 
incoming  calls  at  any  point  in  time,  if  they  have  sev¬ 
eral  device  options. 

“It’s  much  easier  to  integrate  new  applications 
into  these  SIP-based  networks  because  they’re  soft¬ 
ware-based  and  the  protocol  is  open,”  Jackson 
explains.  I 


Quick 

Link© 


For  access  to  this  article  online,  additional 
resources  and  related  links,  please  visit  the 
ComputerworldWeb  site: 

www.computerworld.com/q7a1120 


New  Technology  Features  Supported  in  Windows  XP 

Some  of  the  new  features  and  technology  that  are  expected  to  impact  corporate  users  in  Microsoft’s  new  Windows  XP  desktop  operating  system: 


NEW  FEATURE/ 
TECHNOLOGY 

WHAT  IT  DOES 

HOW  IT  WORKS 

BOTTOM  LINE 

Application 

compatibility 

Allows  applications  built  for  older 
Windows  operating  systems  to  run  on 
Windows  XP. 

Operating  system  catches  every  application  programming  inter¬ 
face  call  and  monitors  what  happens  when  an  application  tries  to 
start  up.  A  Program  Compatibility  Wizard  has  a  set  of  fixes,  or 
shims,  that  provide  an  application  with  the  code  that  it  needs  to 
run.  Corporations  get  an  application-compatibility  tool  kit  to  test 
applications. 

Corporations  should  have  less  trouble  getting  their  legacy  applications 
to  run  on  Windows  XP  than  they  did  on  Windows  2000.  Microsoft 
claims  that  12,000  commercial  applications  will  run  well  on  Windows 

XP,  compared  with  approximately  6,000  for  Windows  2000. 

Remote  Desktop/ 
Remote  Assistance 

Remote  Desktop  lets  employees  access 
their  primary  office  desktops  from  the 
road.  Remote  Assistance  lets  IT  staffers 
see  and  take  control  of  the  screens  of 
mobile  users  they're  trying  to  help. 

Through  the  Remote  Desktop  Protocol,  a  Windows-based  termi¬ 
nal  or  other  Windows-based  client  communicates  with  a  Win¬ 
dows-based  Terminal  Server,  which  a  corporation  must  have  in¬ 
stalled  to  enable  this  feature  to  work. 

Corporations  potentially  can  reduce  costs  associated  with  assisting 
remote  users.  Users  could  gain  more  flexibility  to  work  from  remote 
locations. 

Improvements  to 
System  Restore 

An  administrator  can  pick  a  date  on  the 
calendar  and  restore  a  system  to  the 
way  it  was  on  that  date. 

Operating  system  actively  monitors  system  file  changes  and 
some  application  file  changes  to  record  or  store  versions  created 
before  the  changes  occurred. 

In  the  event  of  a  problem,  an  administrator  can  restore  an  unlimited 
number  of  PCs  to  a  previous  state  without  losing  personal  data  files, 
such  as  Word  documents,  graphics  or  e-mail.  Windows  Millennium 
Edition  supported  System  Restore,  but  the  operating  system  suffered 
a  noticeable  hit  on  performance  when  the  feature  was  in  use,  said 
Microsoft  product  manager  Tom  Laemmel. 

Enhanced  support 
for  wireless 
networking  (802.1x) 

A  “seamless  roaming”  feature  automati¬ 
cally  authenticates  users  to  another 
wireless  network  when  they  change  lo¬ 
cations.  A  “zero  configuration"  feature 
allows  wireless  users  to  gain  access  to 
other  wireless  networks  they're  permit¬ 
ted  to  use. 

Operating  system  detects  when  a  user  moves  to  a  new  wireless 
network  access  point  and  forces  reauthentication  to  ensure  ap¬ 
propriate  network  access.  As  users  roam  from  one  wireless  net¬ 
work  area  to  another,  the  operating  system  automatically  config¬ 
ures  itself  to  the  nearest  network. 

Users  should  find  it  much  easier  to  stay  connected  when  they’re  work¬ 
ing  in  a  wireless  state.  This  feature  will  eliminate  the  need  to  write  code 
to  enable  users  to  switch  from  one  network  to  another.  All  they'll  see  is 
a  sign-on  screen. 

SOURCE:  MICROSOFT  CORP 
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Symbiotic 
Intel  fence 

more  distrib-  Japan  stagnated  because  the  U.S.  has  £ 


Networks  are 
enabling  informal 
groups  of  people  to 
replace  experts. 
ByGaryH.Anthes 

The  internet,  so  relent¬ 
lessly  hyped  in  the  late 
1990s,  may  actually  be 
doing  more  to  boost 
U.S.  productivity  than 
most  people  have  imag¬ 
ined.  Its  unique  ability  to  foster  human 
interaction  may  prove  to  be  a  hidden 
catalyst  for  solving  some  of  society’s 
toughest  problems. 

Scientists  have  viewed  evolution  as  a 
process  of  natural  selection  resulting 
from  competition.  But  re¬ 
cently,  some  have  argued 
that  cooperation  and  sym¬ 
biosis  are  really  the  domi¬ 
nant  forces  in  nature. 

An  academic  argument 
of  no  practical  importance? 

No,  says  Norman  Johnson, 
a  computational  physicist 


70% 

Employees  at  several  large 
companies  say  70%  of  the 
information  they  need  to 
perform  their  jobs  comes 
from  informal  sources. 


at  the  Los  Alamos  National  Laboratory 
in  New  Mexico.  Johnson,  who  leads  the 
Symbiotic  Intelligence  Project  at  the 
lab,  says  an  emerging  understanding  of 
how  people  interact  in  informal  groups 
to  solve  complex  problems  may  pro¬ 
foundly  influence  how  we  organize 
and  manage  corporations,  how  we  hire 
and  train  people  and  what  technology 
we  equip  them  with. 

Johnson  argues  that  self-organizing 
groups  of  “average”  people  can  solve 
complex  problems  better  than  experts 
can.  Challenges  today  —  such  as  man¬ 
aging  a  global  economy,  fighting  ter¬ 
rorism  or  optimizing  supply  chain 
operations  —  are  more  complex  and 


uted  than  problems  were  20  years  ago, 
and  so  they  are  less  amenable  to  top- 
down  solutions  by  “experts,”  he  says. 

In  a  U.S.  Department  of  Labor  sur¬ 
vey,  employees  at  several  large  compa¬ 
nies  said  that  70%  of  the  information 
they  need  to  perform  their  jobs  comes 
from  informal  sources,  not  from  train¬ 
ing  courses,  manuals  or  instructions 
from  their  bosses.  Computer  networks, 
acting  in  symbiosis  with  groups  of 
people,  facilitate  the  flow  of  this  infor¬ 
mal  information  and  help  create 
knowledge,  Johnson  contends. 

“The  big  Aha!’  for  the  Internet  is 
that  it  has  become  all  about  a  social 
process,”  Johnson  says.  “Every  major 
technological  success  in  the  public  in 
the  last  50  years  —  cars,  phones,  beep¬ 
ers,  cell  phones,  Internet  —  has  been 
about  social  connection.  They  all  en¬ 
hance  our  ability  to  connect  in  some 
way  and  are  successful  be¬ 
cause  they  contribute  to 
the  symbiotic  intelligence 
process.  But  because  we  do 
not  view  society  as  a  self¬ 
organizing  entity,  we  only 
see  the  advantages  to  the 
individual,  not  the  whole!” 
Johnson  says  U.S.  intelli¬ 


gence  agencies  invested  heavily  in  IT 
in  the  1990s,  believing  that  tools  such 
as  data  mining  were  the  key  to  solving 
complex  intelligence  problems. 

“But  it  was  generally  a  failure,”  he 
says.  “They  were  always  surprised  by 
events,  when  in  hindsight,  the  danger 
and  players  were  clear. 

“What  the  intelligence  community 
forgot  —  possibly  even  to  this  day  — 
was  that  humans  are  the  best  proces¬ 
sors  of  complex  information,”  he  says. 
“Only  the  combination  of  a  human/ 
computer  symbiotic  system  can  solve 
large  problems  of  high  complexity.” 

Johnson  says  the  U.S.  shot  forward 
economically  during  the  1990s  while 


Japan  stagnated  1 
much  higher  implementation  of  IT. 

The  worker  productivity  increases  that 
have  driven  the  U.S.  economy  can’t  be 
easily  explained  by  academics  and 
economists  because  traditional  models 
see  the  world  as  a  top-down-driven 
place  operating  on  known  rules.  The 
Internet  provides  a  hidden  but  vital 
mechanism  that  the  models  overlook, 
Johnson  says. 

Managers  can  stimulate  the  creation 
of  symbiotic  intelligence  by  becoming 
enablers  more  than  decision-makers, 
he  adds.  They  can  do  so  by  encourag¬ 
ing  the  use  of  the  Internet,  especially 
e-mail;  by  flattening  the  organization 


while  relying  less  on  formal  training 
and  expert  advice;  and  by  encouraging 
expression  and  risk-taking.  Managers 
also  should  define  groups  of  people 
with  highly  diverse  personalities  and 
experiences,  because  diversity  acceler¬ 
ates  the  creation  of  symbiotic  intelli¬ 
gence,  he  says. 

Adele  Howe,  a  computer  science 
professor  at  Colorado  State  University 
in  Fort  Collins,  says  Johnson’s  ideas 
have  practical  implications  in  numer¬ 
ous  realms.  For  example,  she  says,  the 
best  solutions  to  complex  problems  in 
computer  science  —  such  as  sorting  or 
scheduling  —  are  usually  a  hybrid  of 
algorithms  cobbled  together  from  vari¬ 
ous  sources,  not  a  monolithic  approach 
dreamed  up  by  a  single  expert. 

“The  lesson  for  IT  managers  is  to 
invite  diversity,”  Howe  says,  which 
means  taking  chances  on  job  appli¬ 
cants  with  nonstandard  credentials. 

She  also  advises  managers  to  provide 
work  environments  that  promote  in¬ 
formal  interaction. 

“With  the  increased  use  of  the  Net, 
many  of  the  problems  that  have  chal¬ 
lenged  traditional  forms  of  manage¬ 
ment  and  organizations  may  now  find 
solutions,”  Johnson  says.  “The  impor¬ 
tance  of  this  alternative  will  become 
more  significant  as  the  complexity  of 
our  world  increases  and  our  traditional 
ways  of  solving  problems  fail.”  I 


NORMAN  JOHNSON  at  the 
Los  Alamos  National  Labora 
tory  says,  “Average”  people 
can  solve  today’s  problems 
just  as  easily  as  “experts.” 
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Introducing  Active  Archive  Solutions':  The  intelligent  way  to  optimize  database  performance. 

Over  the  next  decade,  mission-critical  databases  are  expected  to  grow  by  more  than  40%  every  year.  How  will  you  keep 
applications  running  at  peak  performance  without  endless  hardware  upgrades?  Active  Archive  Solutions  dramatically  reduce 
the  size  of  your  database  by  setting  aside  infrequently  used  data.  However,  the  data  is  always  kept  “active”  for  easy  access. 
You  improve  performance  and  availability  without  having  to  squeeze  your  database  or  your  budget.  Learn  more. 

Call  800.457.7060  or  visit  www.storesmarter.com. 
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Knowledge  MhnagJment 


DEFINITION 

Knowledge  management  is  the  art 

or  science  of  collecting  organiza¬ 
tional  data  and,  by  recognizing 
and  understanding  relationships 
and  patterns,  turning  it  into 
usable,  accessible  information 
and  valuable  knowledge. 


BY  PETE  LOSHIN 

Rather  than  wax 
philosophical  about 
what  knowledge  is, 
let’s  let  it  be  any  in¬ 
formation  that  can  further  an 
organization’s  goals.  If  manag¬ 
ing  IT  can  be  compared  to 
herding  cats,  managing  knowl¬ 
edge  is  comparable  to  ranch¬ 
ing  fleas  on  a  cat  herd. 

The  knowledge  manage¬ 
ment  model  implies  that  those 
organizations  best  able  to  col¬ 
lect,  index,  store  and  analyze 
knowledge  have  an  advantage 
over  their  competitors.  To  dif¬ 
ferentiate  between  informa¬ 
tion  and  knowledge,  consider 
what  happens  when  you  inter¬ 
pret  data  logs.  Looking  only  at 
the  logs,  a  twice-daily  drop  in 
bandwidth  usage  at  a  particu¬ 
lar  office  may  be  quite  myste¬ 
rious;  only  by  checking  in  with 
on-site  managers  can  you  dis¬ 
cover  that  those  lulls  mark  the 
arrival  of  the  office  coffee  cart. 

These  mysteries  crop  up 
with  every  new  hire  or  respon¬ 
sibility  change,  wasting  valu¬ 
able  time  solving  the  same 
problem  over  and  over.  With 
knowledge  management,  sys¬ 
tems  are  put  in  place  to  collect 
the  answers  and  make  them 
more  accessible.  This  ap¬ 
proach  can  be  used  anywhere 
in  an  organization  but  most  of¬ 
ten  makes  sense  in  customer 
support  applications.  Applica¬ 
tions  can  include  compiling 
solutions  to  MIS  problems,  of¬ 
fering  human  resources  sup¬ 


port  for  employees  and  pro¬ 
viding  self-service  support  for 
retail  customers  in  many  in¬ 
dustries. 

Though  it’s  more  a  business 
model  than  a  technology, 
knowledge  management  in¬ 
corporates  new  technologies 
as  they  appear.  Organizations 
networking  their  PCs  in  the 
late  1980s  and  early  1990s  en¬ 
abled  more  employees  both  to 
use  and  contribute  to  early 
knowledge  management  sys¬ 
tems.  These  systems  depend¬ 
ed  on  centralized  databases  in 
which  employees  entered  in¬ 
formation  about  their  jobs  and 
from  which  other  employees 
could  seek  answers. 

Knowledge  management  sys¬ 
tems  have  always  relied  on 


data  management  technolo¬ 
gies  such  as  relational  data¬ 
base  management  systems, 
data  warehousing  and  data 
cleansing.  To  track  and  ana¬ 
lyze  how  knowledge  manage¬ 
ment  systems  are  being  used, 
managers  turn  to  the  reporting 
utilities  in  their  database  sys¬ 
tems.  Such  reporting  tools  also 
help  generate  knowledge  for 
the  organization  and  manage 
existing  knowledge  assets. 

Practitioners  of  knowledge 
management  have  been  quick 
to  adopt  advances  in  group- 
ware  tools,  too.  Distinguishing 
between  knowledge  manage¬ 
ment  and  groupware  can  be 
difficult;  Knowledge  manage¬ 
ment  systems  often  rely  on 
groupware  technologies  such 
as  Lotus  Notes,  and,  by  defini¬ 
tion,  groupware  facilitates  the 
exchange  of  organizational  in¬ 
formation.  One  telling  differ¬ 
ence  is  a  knowledge  manage¬ 
ment  system’s  emphasis  on 
identifying  knowledge  sources, 
knowledge  analysis  and  man¬ 
aging  the  flow  of  knowledge 
within  an  organization  —  all 
the  while  providing  access  to 
knowledge  stores.  The  knowl¬ 
edge  management  model  re¬ 
gards  the  sum  of  all  knowledge 
within  the  organization  as  its 


Do  You 
Know  What 
You  Know? 

■  A  collection  of  data 
isn’t  information. 

■  A  collection  of  infor¬ 
mation  isn’t  knowledge. 

■  A  collection  of  knowl¬ 
edge  isn’t  wisdom. 

■  A  collection  of  wisdom 
isn’t  truth. 

—  Neil  Fleming,  Lincoln 
University,  Canterbury, 
New  Zealand 


“intellectual  assets,”  and  pro¬ 
vides  tools  for  managing  those 
assets. 

As  a  management  tool, 
knowledge  management  sys¬ 
tems  require  technology  as 
well  as  consultants  who  advise 
on  how  to  handle  knowledge 
audits,  analysis  and  flow.  And 
knowledge  management  con¬ 
sultants  are  quick  to  apply  new 
technologies.  Over  the  past 
few  years,  just  as  groupware 
applications  shifted  from  pro¬ 
prietary  client/server  models 


Clarifying  Terms 


Context  Independence 


.4k 


Data  is  an  item 
or  event  out  of 
context  with  no 
relation  to  other 
things. 


Information  is  rep¬ 
resented  by  relation¬ 
ships  between  data, 
and  possibly  other 
information. 


Knowledge  is  repre¬ 
sented  by  patterns 
among  data,  informa¬ 
tion  and  possibly  other 
knowledge.  These  pat¬ 
terns  don’t  actually  con¬ 
stitute  knowledge  until 
they  are  understood. 


Knowledge 


/ 


Wisdom  is  the  recognition 
that  knowledge  patterns 
arise  from  fundamental 
principles  and  the  under¬ 
standing  of  what  those 
principles  are. 

Wisdom 

UNDERSTANDING  PRINCIPLES 


Data 


S 


Information 


UNDERSTANDING  PATTERNS 


UNDERSTANDING  RELATIONS 
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Understanding 


ADAPTED  FROM  KNOWLEDGE  MANAGEMENT.  BY  GENE  BELLINGER  OF  SEATTLE-BASED 
CONSULTANCY  OUTSIGHTS  INC  (WWW  OUTSIGHTS  COM/SYSTEMS/WELCOME  HTM) 


to  a  platform-agnostic  Web 
model,  knowledge  manage¬ 
ment’s  embrace  of  Web  tech¬ 
nologies  has  extended  its  use¬ 
fulness  and  cut  costs.  Web- 
based  knowledge  management 
systems  require  no  (or  mini¬ 
mal)  change  to  users’  desktops 
and  can  be  simpler  to  install 
and  administer. 

More  recently,  knowledge 
management  systems  started 
using  XML  to  identify  relevant 
data  elements  and  extract 
knowledge  from  them  both  in 
and  out  of  the  organization. 
XML  offers  document  schemas 
and  tags,  allowing  readers  to 
collect  meta-information  about 
each  piece  of  information.  For 
example,  a  data  object  marked 
“<Solution>”  in  a  help  desk  ap¬ 
plication  is  more  likely  to  have 
useful  answers  than  one 
marked  “<Problem>.” 

Is  It  for  You? 

Knowledge  management  re¬ 
quires  buy-in  at  the  very  high¬ 
est  levels  of  an  organization. 
Costs  can  be  quite  high,  as  off- 
the-shelf  products  are  unlikely 
to  solve  the  typically  massive 
and  complex  challenges  facing 
large  organizations.  And  knowl¬ 
edge  management  systems  are 
rarely  useful  outside  of  large 
organizations.  As  a  result,  high 
costs  for  software  and  hard¬ 
ware  may  be  dwarfed  by  con¬ 
sulting  fees  for  customizing 
knowledge  management  soft¬ 
ware  or  creating  customized 
in-house  applications. 

Ultimately,  whether  you 
build  or  buy,  creating  a  knowl¬ 
edge  management  system  rep¬ 
resents  a  significant  manage¬ 
ment  decision  —  one  that 
must  have  support  throughout 
the  organization. 


Loshin  is  a  freelance  writer  in 
Arlington,  Mass. 
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NOW,  RESOURCE  CONSOLIDATION  IS  AN  EVEN  BRIGHTER  IDEA. 


It’s  a  prerequisite  for  implementing  a  disaster  recovery  plan.  Reduce  the  number  of 
sources  to  be  replicated  and  you  increase  the  manageability  of  your  backup  operation 
and  the  fidelity  of  ybfl'f  data.  Making  fewer  elements  work  better  together  is  what  resource 
consolidation  is  all  about.  We  can  help  with  that  step,  as  well  as  the  next.  Our  new 
ContinuStor™  Director  can  be  a  critical  component  of  a  business  continuance  strategy. 
Find  out  what  we  can  do  for  you  by  downloading  our  white  papers  on  resource  consolidation 
and  disaster  recovery  at  lsilogicstorage.com.  Or  call  1-888-638-2786  or  408-433-8686. 
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Terrorist  Worries  Force 
Top-Down  Security  Review 

In  light  of  recent  events ,  Mathias  begins  to  conduct 
an  internal  security  review  —  and  turns  up  new  issues 


TECHI0L0GY 


SINCE  THE  TRAGEDY  On  Sept.  11, 
I’ve  thought  about  what  I  can 
do  to  prepare  this  company  in 
the  event  that  another  terror¬ 
ist  act  occurs  and  we  are 
somehow  victimized.  I’ve  also  thought 
about  what  I  can  do  to  prevent  a  terror¬ 
ist  act  from  occurring  at  my  company 
or  having  our  infrastructure  used  in 
some  way  by  terrorists. 

No  doubt  computers  and  the  Internet 
were  used  in  some  way  in 
the  perpetration  of  this 
horrific  crime.  Whether  it 
was  encrypted  e-mail,  dig¬ 
ital  steganography,  news- 
groups,  chat  sessions  or  in¬ 
stant  messaging  programs, 
all  of  these  technologies 
allow  for  covert  communi¬ 
cations. 

I  can’t  control  what’s 
available  on  the  Internet, 
but  I  will  do  everything  I 
can  to  prevent  cyberter¬ 
rorists  from  exploiting  my 
company’s  information  sys¬ 
tems  to  attack  my  firm  or 
my  country.  I  don’t  want  to 
be  the  security  manager 
who  let  his  company’s  sys¬ 
tems  be  used  as  a  vehicle  to  transmit 
messages  or  store  information  to  facili¬ 
tate  a  terrorist  attack.  Fortunately,  there 
are  some  things  I  can  do.  We  already 
have  many  of  the  information  security 
controls  in  place,  but  I’m  reviewing 
them  to  make  sure  we’re  doing  the  most 
we  possibly  can. 

Back  to  Basics 

I’ve  started  by  reviewing  account 
creation,  administrative  access  and  oth¬ 
er  types  of  permissions  that  might  al¬ 
low  for  unauthorized  access.  On  any 
given  day,  our  employees  use  about  150 
administrative  accounts  to  access  our 
information  systems.  Before  a  person  is 
granted  administrative  rights,  the  re¬ 
quest  goes  through  a  thorough  review 
process.  As  a  member  of  the  review 
team,  I  regularly  question  requests  for 


access  if  I  feel  the  need  isn’t  justified. 
When  conducting  such  a  review,  I  also 
check  that  accounts  of  employees  who 
have  left  the  company  have  been  prop¬ 
erly  deleted  or  disabled,  according  to 
our  employee-departure  policy. 

We  use  a  variety  of  tools  to  restrict 
the  amount  of  administrative  access  af¬ 
forded  to  individuals.  Only  certain 
employees  have  full  privileges.  For  all 
other  administrative  accounts,  only  the 
functions  required  for  an 
individual’s  job  are  granted. 
To  accomplish  this,  we  use 
a  combination  of  strong 
user  and  group  profiles  for 
Windows  NT  and  the  free 
Sudo  utility  for  Unix.  We’re 
also  in  the  process  of  im¬ 
plementing  Bedford,  Mass.- 
based  RSA  Security  Inc.’s 
SecurlD  token-based  infra¬ 
structure  for  administra¬ 
tive  access. 

There  are  three  forms  of 
authentication:  Something 
you  know  (such  as  a  pass¬ 
word),  something  you  have 
(an  automated  teller  ma¬ 
chine  card,  for  instance) 
and  something  that  you  are 
(such  as  your  fingerprint).  The  SecurlD 
token  gives  us  a  two-form  factor  au¬ 
thentication  mechanism,  requiring  a  to¬ 
ken  and  a  passcode,  for  example. 

Then  there’s  the  issue  of  physical  ac¬ 
cess.  Many  companies,  including  my 
own,  separate  information  security 
from  physical  security,  but  an  informa¬ 
tion  security  manager  had  better  be 
aware  of  his  company’s  physical  access. 
The  best  firewall  in  the  world  won’t  do 
any  good  if  someone  is  able  to  walk  up 
to  a  Unix  system  with  a  laptop,  plug 
into  the  serial  port  and  boot  the  system 
from  a  local  floppy  disk.  Physical  access 
control,  proper  hiring  practices  and  the 
physical  security  of  the  workplace  are 
important. 

I  have,  with  minimal  notice  to  man¬ 
agement,  tried  to  gain  unauthorized  ac¬ 
cess  to  our  building,  other  offices  and 


data  centers.  I’ve  been  able  to  roam 
around  the  offices  of  departments  such 
as  payroll,  operations  and  even  the  ex¬ 
ecutive  staff  looking  for  unsecured  ar¬ 
eas,  passwords  under  keyboards  and 
unprotected  screen  savers.  As  a  result 
of  my  findings,  I’m  modifying  our  cur¬ 
rent  policies  to  address  the  technical  is¬ 
sues,  such  as  forcing  automatic  screen¬ 
saver  activation  as  part  of  our  worksta¬ 
tion  baseline.  I  have  also  spoken  to  our 
security  service  regarding  my  ability  to 
enter  the  building  unchallenged  on  the 
weekend. 

Security  Planning 

I’m  also  considering  writing  up  a 
false  resume  to  test  our  hiring  prac¬ 
tices.  Hackers  have  tried  to  assess  inter¬ 
nal  security  in  targeted  companies  by 
getting  an  interview  for  an  information 
security  job.  I  remember  a  story  from  a 
few  years  back  when  an  individual  was 
hired  into  a  telephone  company  and  in¬ 
stalled  back  doors  into  the  private 
branch  exchange  switches  so  he  could 
make  free  long-distance  calls.  Without 
the  proper  checks,  you  don’t  know  who 
you’re  hiring. 

And  when  was  the  last  time  you  went 
dumpster  diving?  Some  companies 
can’t  afford  a  document  destruction 
service.  Instead,  they  dispose  of  sensi¬ 
tive  data  on  their  way  out  the  door  each 
evening  by  throwing  things  into  a 
dumpster.  In  one  instance  at  a  previous 
employer,  I  collected  a  virtual  private 
network  (VPN)  setup  document  com¬ 
plete  with  the  key  passphrases  and  user 
passwords  I  needed  to  set  up  the  VPN 
tunnel.  I  even  found  a  Web  address  to 
download  the  VPN  software  client. 

I  also  plan  to  review  our  disaster 
preparedness  and  business-continuity 
plans.  Information  systems  at  Wall 
Street  firms  are  about  as  well  prepared 
as  they  can  be.  Unfortunately,  many 
companies  are  far  from  Wall  Street’s 
baselines  and  methodologies.  Whether 
it’s  money,  technology  or  awareness, 
companies  always  seem  to  have  excus¬ 
es  for  not  addressing  business-continu¬ 
ity  planning  or  disaster  recovery. 

Of  my  four  previous  employers,  not 
one  had  invested  in  developing  a  sound 
business  continuity  plan.  Each  time  I 
tried  to  build  a  business-continuity  pro- 


THISWEEK’SGLOSSARY 

Digital  steganography:  This  is  the 
art  of  hiding  documents,  such  as  word 
processing  files,  spreadsheets  or  maps, 
inside  other  files.  Practitioners  com¬ 
monly  use  graphics  files  to  hide  the  in¬ 
formation,  but  the  technique  will  work 
with  almost  any  file  type.  Once  created, 
the  documents  inside  such  files  are  vir¬ 
tually  impossible  to  detect. 

LINKS: 

www.courtesan.com/sudor.  With 
this  free  software  utility  for  Unix,  written 
by  Todd  Miller,  an  administrator  can  give 
users  or  a  group  permission  to  run 
specified  commands  with  root  privi¬ 
leges. 

www.bioscrypt.com/OO/bio-OO. 
shtml :  One  way  to  improve  security  is 
by  restricting  data  center  access  with 
fingerprint  readers  or  other  biometric 
devices.  Toronto-based  Bioscrypt  Inc.’s 
Web  site  shows  a  range  of  devices  you 
can  use  and  includes  white  papers  on 
the  subject. 

www.sans.org/infosecFAQ/covert 
channels/steganography.htm :  The 

Web  site  for  the  Bethesda,  Md.-based 
SANS  Institute  gives  an  excellent 
overview  of  steganography.  The  story 
also  includes  an  extensive  bibliography 
of  related  online  links  and  books. 


gram,  I  was  able  to  justify  and  acquire 
funds  only  for  backup  systems  and  off¬ 
site  data  storage.  Many  companies 
seem  willing  to  take  the  risk  that  the 
low  chance  of  catastrophe  outweighs 
the  cost  of  resources  needed  to  arrange 
for  an  alternate  site  to  fail-over  to  in  the 
event  of  a  disaster. 

Sure,  it’s  expensive.  And  perhaps 
some  companies  can  justify  the  risk  of 
not  investing  in  the  needed  infrastruc¬ 
ture.  However,  it’s  important  that,  as  a 
security  manager,  I  present  the  busi¬ 
ness  case  to  management  and  ensure 
that  the  effect  of  a  loss  of  infrastructure 
is  put  in  proper  perspective. 

How  can  we,  as  security  managers, 
improve  information  security  in  light  of 
recent  events?  I  welcome  your  experi¬ 
ences  and  suggestions  in  the  Security 
Manager’s  Journal  forum.  I 

For  more  on  the  Security 
Manager's  Journal,  including  past 
journals,  visit: 

www.computerwor1d.com/q7q2000 
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■  This  week's  journal  is  written  by  a  real  security  manager,  “Mathias  Thurman,”  whose  name  and  employer  have  been  disguised  for  obvious  reasons.  Contact  him  at  mthurman@hushmail.com  or  go  to  the  Security  Manager's  Journal  forum. 
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INTEGRATION: 


A  HERCULEAN  TASK. 


Reshaping  IT  infrastructures  can  be  difficult  for  mere  mortals. 


How’s  this  for  a  challenge?  Take  an  e-business  infra¬ 
structure  teeming  with  disparate  networks,  platforms, 
standards  and  applications,  and  make  them  all  work  as  one. 
Across  all  business  units.  With  suppliers,  partners  and 
customers.  Yep,  integration  is  one  colossal  test  of  strength. 

So  how  do  you  tackle  it?  You  can  start  by  ordering  our 
Software  Evaluation  Kit  for  Linux?  (It’s  yours  free  by 
simply  registering  by  phone  or  online.)  In  it  you’ll  find  an 
overview  of  e-business  integration,  along  with  perspec¬ 
tives  and  strategies  for  tough  integration  challenges.  You’ll 
also  get  free  trial  code  for  IBM  software  such  as  DB2? 
WebSphere?  Lotus®  and  Java"  Tools.  It’s  the  perfect 
integration  software  primer.  And  best  of  all,  everything 
in  it  also  speaks  Linux. 


As  the  fastest  growing  and  most  accessible  operating 
system,  Linux  is  an  ideal  platform  for  the  integrated 
environment.  For  small  business  or  corporate  behemoth. 
It’s  open,  scalable  and  hardware-agnostic. 

That’s  why  IBM  offers  the  industry’s  richest 
selection  of  code  for  Linux.  And  then  backs  it  with  IBM 
service,  support  and  consulting.  That  means  an  army  of 
integration  experts  proficient  in  everything  from 
designing  to  deploying  to  maintaining 
truly  open  and  interoperable  systems. 

To  see  how  you  can  take  on  an  inte¬ 
gration  project,  widi  little  to  no  chance  of 
a  hernia,  visit  our  Web  site  or  call  today  for 
your  free  Software  Evaluation  Kit  for  Linux. 


CLICK  OR  CALL  FOR  A  FREE  IBM  SOFTWARE  EVALUATION  KIT  FOR  LINUX. 


(g°  ibm.com/e-business/soready/p4  Q  1  800  426  7080,  ask  for  Open 


*  LEGA I.  NOTE:  IBM.  Lotus,  the  e-business  logo  and  other  marks  designated  *  or "  are  trademarks  of  International  Business  Machines  Corporation  in  the  United  States  and/or  other 
countries.  Java  and  all  Java-based  trademarks  are  trademarks  of  Sun  Microsystems,  Inc.  in  the  United  States,  other  countries,  or  both.  Other  company,  product  and  service  names  may 
be  trademarks  or  service  marks  of  others.  Linux  is  a  registered  trademark  of  Linus  Torvalds.  ©  2001  IBM  Corporation.  All  rights  reserved.  Limit  one  kit  per  respondent.  Respondents  will 
be  required  to  complete  a  registration  form  in  order  to  participate  in  this  offer.  Offer  ends  12.31.01.  Offer  available  only  in  U.S. 
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TECHNOLOGYEMERGING  COMPANIES 


Start-up  Bets  Big  on 
Supply  Chain  Standard 


Infoteria’s  software  builds  on  RosettaNet 
for  electronic  supplier/customer  exchanges 


BY  AMY  HELEN  JOHNSON 

When  a  major 
customer  re¬ 
quested  that 
Ohka  Ameri¬ 
ca  Inc.  sup¬ 
port  e-business  transactions, 
the  Hillsboro,  Ore.-based  com¬ 
pany  went  searching  last  July 
for  a  vendor  to  help  it  auto¬ 
mate.  Using  iConnector  from 
Beverly,  Mass.-based  Infoteria 
Corp.,  Ohka  successfully  test¬ 
ed  an  electronic  data  exchange 
based  on  RosettaNet’s  XML 
standards. 

“We  were  able  to  prove  the 
concept  that  this  would  work 
very  quickly  and  very  cost- 
effectively,”  says  Christopher 
Rosenthal,  Ohka’s  RosettaNet 
project  manager.  As  a  result, 
the  customer,  Intel  Corp.,  saw 
that  Ohka,  a  producer  of  spe¬ 
cialty  chemicals  for  semicon¬ 
ductor  manufacturers,  was  se¬ 
rious  about  complying  with  its 
request.  And  that  raised  Ohka’s 
status  with  the  chip  maker, 
Rosenthal  says. 

Situations  where  a  company 
needs  an  easy  way  to  adopt 
Santa  Ana,  Calif.-based  Rosetta¬ 
Net’s  standard  for  e-business 
transactions  are  a  perfect  fit 
for  Infoteria,  says  CEO  Tim 
Browne.  The  start-up  is  “100% 
focused  on  automating  supply 
chains,”  he  says.  Infoteria  has 
picked  RosettaNet’s  XML- 
based  Partner  Interface  Pro¬ 
cesses  (PIP)  and  dictionaries 
as  the  standards  most  likely  to 
be  adopted  for  e-business. 

Infoteria’s  focus  on  Rosetta¬ 
Net  standards  is  a  competitive 
advantage  among  a  certain 
segment  of  customers,  says 
Deborah  Hess,  a  senior  analyst 
at  Gartner  Inc.  in  Stamford, 
Conn.  “For  anyone  specifically 
targeted  on  RosettaNet,  this  is 
probably  the  server  they  would 
want  to  have,”  she  says. 


Initially,  Infoteria  offered  a 
set  of  independent,  but  inter¬ 
locking,  XML  processing  and 
management  tools,  such  as 
iConnector.  Last  month,  Info¬ 
teria  released  Asteria  Server 
and  Asteria  Planet,  which  in¬ 


corporate  those  tools  into  sys¬ 
tems  that  are  quick  to  imple¬ 
ment,  cost-effective  and  low- 
maintenance,  claims  Browne. 
Infoteria  offers  Asteria  Server 
to  large  enterprises  that  want 
to  build  trading  hubs. 

Asteria  Planet  is  a  plug-and- 
play  system  for  small  and 
medium-size  companies  that 
trade  with  large  companies. 

Ohka  is  now  upgrading  to 
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INFOTERIA  CEO  TIM  BROWNE  says,  “We  banked  the  success  of 


the  company  on  RosettaNet.” 

Infoteria  Corp. 

900  Cummings  Center 
Suite  403T 
Beverly,  Mass.  01915 
(978)  922-4029 

Web:  www.infoteria.com 

The  technology:  Supply  chain 
trading  server  software  based  on 
the  RosettaNet  XML  standard 

Company  officers: 

•  Tim  Browne,  president  and  CEO, 
U.S.,  and  co-founder 

•  Pina  Hirano,  president  and  CEO, 
Japan,  and  co-founder 

•  Yoshiyuki  Kitahara,  executive 
vice  president,  chief  technology 
officer  and  co-founder 

Milestones: 

•  September  1998:  Company 
founded 

•  January  1999:  IPex  shipped 

•  September  2001:  Asteria 
released 


Asteria,  which  supports  trad¬ 
ing  with  up  to  five  partners,  ac¬ 
cording  to  Rosenthal.  Right 
now,  iConnector  packages 
sales  order  data  retrieved  from 
the  company’s  enterprise  re¬ 
source  planning  system,  en¬ 
crypts  it  and  passes  it  over  the 
Internet  to  Intel’s  proprietary 
document  exchange  system,  he 
says.  Ohka  has  an  Asteria  Plan¬ 
et  server  in  place  and  is  wait¬ 
ing  for  RosettaNet  to  validate 
the  invoicing  PIP  that  Ohka 
plans  to  use,  says  Rosenthal. 

Because  Ohka  is  still  in  the 
implementation  phase  of  its 
project,  Rosenthal  can’t  yet 
calculate  the  financial  benefits 
of  using  Asteria.  However,  he 
says  he  expects  that  a  shrink¬ 
ing  payment  cycle  and  reduced 
invoice  errors  will  produce 
savings.  Rosenthal  also  sees  a 
security  benefit  in  using  Aster¬ 
ia  compared  with  an  applica¬ 
tion  service  provider-based 
service,  since  Ohka  can  control 
the  server  and  the  data  behind 
its  own  firewall.  So  far,  the  im¬ 
plementation  has  been  fairly 
smooth,  he  says. 

Risk  Factors 

Infoteria’s  biggest  weakness 
at  this  point  isn’t  in  the  prod¬ 
uct  suite,  but  in  the  company 
itself,  says  Hess.  Established 
in  Japan,  Infoteria  has  low 


Employees:  50 

Burn  money:  $27 

million  from  Nippon 
Technology  Venture 
Partners  Ltd.,  Soft- 
bank  Venture  Capital 
Nippon  Investment  &  Finance 
Co.  and  others 

Products/pricing:  Asteria  Enter¬ 
prise  Server  starts  at  $200,000, 
Asteria  Planet  at  $20,000,  iCon¬ 
nector  (data  extraction)  at 
$5,000,  IXSLT  (XML  style  sheet 
processor)  at  $5,000  and  iPex 
(XML  development  tool  kit)  at 
$5,000 

Customers:  Pioneer  Corp., 
Siemens  AG,  Ohka  America  Inc., 
Nortel  Networks  Corp.  and  others 

Red  flags  for  IT: 

•  Infoteria's  expertise  is  in 
RosettaNet  XML  standards. 

•  Some  competitors  offer  a  wider 
range  of  products  and  services. 


name  recognition  in  the 
U.S.  and  is  up  against 
well-known  competi¬ 
tors,  she  says. 

«  There’s  also  a  risk 
'~o  due  to  Infoteria’s  heavy 
reliance  on  RosettaNet, 
she  says.  The  small  and 
midsize  companies  that  are  the 
target  market  of  Asteria  Planet 
may  not  embrace  RosettaNet 
as  enthusiastically  or  as  quick¬ 
ly  as  Browne  hopes.  Support¬ 
ing  other  protocols  is  a  good 
idea,  Hess  says. 

Browne  says  Infoteria  is 
branching  out  beyond  Rosetta¬ 
Net.  The  company  has  built 
Asteria  so  that  it  can  accept 
many  different  XML-based 
frameworks,  he  says,  adding 
that  Infoteria  has  produced 
versions  that  adhere  to  the 
ebXML  business  standard  and 
the  newsML  content  standard.  ft 

Johnson  is  a  Computerworld 
contributing  writer  in  Seattle. 
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Banking  on 
RosettaNet 


CEO  Tim  Browne  makes  no  bones 
about  it:  Infoteria’s  success  depends  on 
enterprises  adopting  RosettaNet’s  stan¬ 
dards  for  e-business.  “In  some  ways,  we 
banked  the  success  of  the  company  on 
RosettaNet,”  he  says. 

That’s  not  such  a  bad  bet,  says  Gart¬ 
ner’s  Deborah  Hess.  RosettaNet  -  a 
nonprofit  consortium  of  400  companies 
concentrated  in  the  electronics,  semi¬ 
conductor  manufacturing  and  IT  indus¬ 
tries  -  has  a  good  chance  of  building  the 
most  widely  used  XML-based  standards 
for  data  exchange  and  business- 
process  alignment  among  trading  part¬ 
ners  and  supply  chains,  she  says. 

RosettaNet’s  standards  are  the  most 
mature  of  the  specifications  available, 
she  adds.  And,  despite  its  roots  in  a  nar¬ 
row  set  of  computer-focused  industries, 
RosettaNet  has  opened  up  its  standard¬ 
ization  process  to  produce  XML  vocabu¬ 
laries  for  a  wide  range  of  markets. 

However,  Infoteria  isn’t  well-known 
and  is  often  eclipsed  by  companies  like 
WebMethods  and  Tibco,  says  Hess. 
Other  RosettaNet  members  also  have 
products  that  perform  similar,  albeit 
broader,  integration  tasks. 

WebMethods  Inc. 

Fairfax,  Va. 

www.webmethods.com 

WebMethods’  XML  integration  platform 
doesn’t  have  the  same  laser  focus  on 
RosettaNet  as  Infoteria,  says  Hess.  It 
requires  customization  to  support 
RosettaNet’ s  standards.  WebMethods 
tends  to  do  the  implementation  for 
companies,  she  observes,  rather  than 
providing  a  do-it-yourself  solution  as 
Infoteria  does. 

Tibco  Software  Inc. 

Palo  Alto,  Calif. 
www.tibco.com 

Tibco  isn’t  as  close  a  competitor  to  Info¬ 
teria  as  WebMethods  because  it  offers  a 
much  larger  product  line,  says  Hess.  Tib¬ 
co  covers  not  only  XML  integration  plat¬ 
forms,  but  also  application  servers,  XML 
document  extensibility  tools,  wireless 
portals  and  other  areas.  Enterprises  may 
prefer  to  use  Tibco  when  they  need  a 
wider  range  of  applications  than  Infote¬ 
ria  can  offer,  she  says. 

-Amy  Helen  Johnson 
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Few  companies  see  the  full  scope  of 
the  contribution  IT  can  make  to  their 
business.  Fireman's  Fund,  a  leading 
insurance  company,  will  actively 
empower  you  to  make  that  difference. 
Our  Shared  Services  infrastructure 
positions  you  to  make  decisions  with  a 
tangible  impact  on  the  profitability  of 
technological  solutions.  We’ll  give  you 
the  accountability  you  crave  and 
inspire  you  to  make  the  most  of  it  - 
with  lucid  guiding  principles,  ener¬ 
gized  co-workers,  and  exceptional 
rewards.  With  your  commitment,  and 
that  of  our  global  parent,  Allianz  AG, 
there’s  nothing  we  can't  accomplish. 


Lead  Systems  Engineer 

www.firemansfund.com/careers/ita5.html 

The  Lead  Systems  Engineer  at  Fireman's  Fund  will  act  as  the  team  lead  on  a 
highly  visible  claims  integration  solution  application  which  is  responsible  for 
providing  the  adjuster  a  "dashboard"  view  of  the  claim,  their  work  in  progress, 
and  varied  integration  requirements,  based  on  the  vendor  providing  the 
service.  This  teamlead  will;  participate  in  the  design  of  the  application,  the 
interface  with  the  backend  integration  protocols;  work  closely  with  systems 
engineers,  as  well  as  a  diverse  user  population;  lead  the  application  team  and 
the  legacy  migration  team;  and  provide  feedback  to  the  associated  user-based 
design  team.  Must  have  full  technical  knowledge  of  systems  analysis  and 
application  programming.  Minimum  5  years  development  experience 
including  Java,  Websphere,  OO  principals,  J2EE,  MQ,  XML,  Messaging 
protocols,  HTTP,  HTML,  and  Cobol  is  required  along  with  at  least 
one  project  acting  as  team  or  technical  lead.  Please  visit 
www.firemansfunds.com/careers/ita5.html  for  more 
information  on  our  current  opportunity  in  Novato,  CA. 


Fireman’s 

Fund 
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The  U.S.  Department  of  Commerce  anticipates 
that  close  to  200,000  software  development  jobs 
will  be  created  during  the  next  five  years,  not 
including  retirements.  Better  than  60  percent  of 
that  total  will  be  created  in  the  non-IT  sector  - 
companies  using  software  and  IT  as  a  business 
enabler  vs.  the  product  itself. 

InterDigital  Communications  Corp.,  which  has 
three  development  labs  in  North  America  (Montreal, 
New  York  and  Philadelphia),  is  among  those  racing 
to  the  next  generation.  Founded  30  years  ago  in 
Philadelphia,  InterDigital  is  in  continuous  search 
mode  for  three  types  of  talent  -  software 
engineering/development,  core  wireless  technology 
development  (the  ability  to  write  basic  algorithms 


IT  CAREERS 


careers 


Advertising  Supplement 

IT  Careers  in 
Software  Development 


defining  how  wireless  appliances  send  and  receive 
signals),  and  embedding  software  into  chip  design. 

"One  of  the  primary  things  that  motivates  our 
engineering  team  is  that  we  are  breaking  new 
ground  for  mobile  products,"  explains  Gary  Isaacs, 
vice  president  of  human  resources.  With  just  under 
300  engineers,  InterDigital  also  attracts  engineers 
with  its  small  size.  "Your  focus  may  be  on  software, 
but  at  InterDigital  you'll  follow  that  software  through 
all  phases  of  the  product  life  cycle,  working  side  by 
side  with  the  others  whose  work  complements  your 
own,"  says  Isaacs. 

"We  look  for  people  who  contribute  individually  but 
also  work  on  teams  internally  and  with  our  part¬ 
ners,"  he  adds.  In  addition  to  offering  competitive 
compensation,  InterDigital  is  currently  rolling  out  a 
new  career  development  tool  for  the  engineering 
community  that  allows  individuals  to  choose  one  of 
three  career  tracks:  program-management,  project 
leadership  or  technological  expertise. 

Similar  in  size  is  CrossWorlds  Software,  Inc.,  based 
in  Burlingame,  CA.  CrossWorlds  provides  business 
integration  solutions  that  make  integrating  within  an 


enterprise  and  across  the  Internet  possible.  Some  of 
CrossWorlds'  customers  include  Caterpillar,  The  Dow 
Chemical  Company,  DuPont,  Nortel  Networks,  Sony, 
Telekom  Austria  and  Whirlpool  Corporation. 

"Individuals  who  join  CrossWorlds  start  off  on 
a  product  team,"  says  Robin  Rea,  employment 
manager.  "We  move  people  through  a  range  of 
assignments  with  new  responsibilities  so  that 
they  can  continue  to  develop.  We  tend  to  look  at 
resumes  for  what  you  can  bring  to  the  company  - 
advancement  consistency,  longevity  in  employment, 
experience." 

Rea  says  that  the  company  of  350  employees  is  also 
a  popular  employer.  "We  encourage  people  to  excel, 
we  offer  a  wide  range  of  projects,  and  we  set  stan¬ 
dards  high,"  says  Rea.  "And,  the  people  who  work 
around  you  are  excellent  at  what  they  do.  We  value 
the  attempt  at  excellence  as  much  as  the  success." 

For  more  job  opportunities  with  software  development  firms,  turn  to  the  pages 
of  ITcareers. 

•  If  you'd  like  to  take  part  in  an  upcoming  ITcareers  feature,  contact 
Janis  Crowley,  650.312.0607  or  janis_crowley@itcareers.net. 

•  Produced  by  Carole  R.  Hedden 

•  Designed  by  Aldebaran  Graphic  Solutions 


a> 

s- 


< 


stop  C h9s/ 


o 

OQ 

X 

flj 


V 

o 

c 


If  you’re  an  IT  professional  who’s  tired  of  playing  industry  catch  up  and  want  to  get  ahead  of  the  game, 
look  to  Ajilon.  As  a  frontrunner  of  information  technology  services,  our  people  are  always  in  demand. 
Our  clients  span  a  wide  variety  of  industries  so  you’ll  benefit  from  a  challenging,  varied  environment. 
And  with  a  steady  flow  of  new  projects  you’ll  have  the  stability  that  many  consultants  dream  of.  At  Ajilon 
we  don’t  just  invest  in  technology,  we  invest  in  people.  Visit  us  on  the  web  at  www.ajilon.com. 
You’ll  see  we’re  taking  information  technology  into  the  future.  And  we’d  like  to  take  you  with  us. 


AJ  |  LON®  j  www.ajilon.com 

The  human  side  of  information  technology. 

An  equal  opportunity  employer. 


NATIONS  IMES 


United  Nations  Joint  Staff  Pension  Fund  Investment  Management  Service 

SENIOR  SYSTEMS  ANALYSTV  P-5,  NEW  YORK 

The  United  Nations  is  seeking  to  recruit  a  Senior  Systems  Analyst  for  the  Investment 
Management  Service  of  the  United  Nations  joint  Staff  Pension  Fund.  Under  the 
supervision  of  the  Director  of  the  Investment  Management  Service,  the  incumbent  is 
responsible  for  defining  the  design,  strategy,  structure  and  analysis  of  current  and  future 
information  technology  requirements  of  the  Investment  Management  Service  (IMS), 
which  is  responsible  tor  management  of  the  investment  of  a  $25  billion  Fund.  He  or 
she  will  plan  and  oversee  the  Intranet/lntemet  and  related  technologies  of  IMS  with 
particular  emphasis  on  industry  developments  in  the  areas  of  real-time  financial  and 
market  data,  portfolio  analysis  and  modelling.  The  incumbent  will  supervise  the  IMS 
infrastructure  management  (LAN,  computer  operations,  facilities  management),  user 
services,  technical  support  and  operations  (UNIXWinNT,  SQL  DBAs,  RAS,  enterprise 
wide  applications  and  office  automation),  technical  upgrades,  co-ordination  with  UN 
entities  and  non-UN  Vendors,  planning  of  staff  training,  document  imaging.  UN  official 
documentation,  electronic  distribution  and  access,  ana  e-commerce.  The  incumbent 
will  also  develop  standards  for  the  Service  in  hardware  and  software  evaluation,  co¬ 
ordination  of  IT  research  in  the  Service.  e-Mail,  groupware,  workflows,  methodologies, 
consulting  for  IT  departmental  projects  (review  of  RFPs,  Due  Diligence  Visits,  risks 
assessment,  etc),  applications  support  and  special  projects.  He  or  she  will  also 
manage  budget  formulation  and  expenditure  control,  policy  co-ordination,  contracting 
and  contract  management,  costs  analysis  and  billing,  as  well  as  human  resource  policy 
co-ordination  and  tne  supervision  of  Information  bystems  personnel  within  IMS.  The 
incumbent  will  also  determine  and  ensure  the  development  of  security  related  policies 
including  access  policies,  security  administration  and  information. 

The  ideal  candidate  would  have  an  Advanced  University  degree  in  a  technology-related 
field  such  as  information  management,  computer  science,  mathematics,  physics, 
statistics  or  the  relevant  disciplines.  MBA  with  major  in  Finance  an  asset 
EXPERIENCE  a  minimum  of  14  years  experience  is  required,  including  six  years  of 
international  and  supervisory  experience  in  formulating  strategic  plans  design  and 
architectures  for  addressing  business  problems  and  managing  implementation  of 
solutions.  Experience  in  leading  a  development  team  to  problem  solution  is  an 
advantage.  Extensive  knowledge  in  a  range  of  computer  languages  including  C,  C++, 
Perl,  Java,  java-script  Visual  Basic  Access,  HlrlL  DHTML  EHTML Microsoft  OLAR  SQL 
Relational  skills,  Client  Server  Programming,  and  hands-on  experience  with  interactive 
systems  are  required.  Experience  with  both  large  scale  general  purpose  and  smaller 
dedicated  systems  covering  various  fields  of  application  and  database  management 
(Multi-currency  Accounting  and  Management  Reporting)  is  also  required.  Must  be 
thoroughly  familiar  with  Reuters.  Bloomberg,  SWIFT.  DataStream.  I  LX  Bridge 
Information  Systems,  Computron,  Instinet,  Dow  tones  Telerate,  Turret  Systems. 
Thorough  knowledge  is  also  required  in  Windows  NT  4.0,  Windows  98.  Windows  95. 
Netware  4.x  and  5.x,  Notes.  SYBASE  Oracle.  UNIX  Solaris  and  Unux  The  analyst 
manages  security  of  the  network  by  performing  daily  backups  and  storing  them  on  off¬ 
site  storage;  manages  the  helpdesk  and  provides  users  with  efficient  support  on 
connectivity  and  productivity  application.  Must  be  certified  (or  re-certified  within  the 
last  five  yean)  in  one  of  the  following;  Microsoft  Certified  Systems  Engineer  +  Internet 
Microsoft  Certified  Systems  Engineer,  Microsoft  Certified  Database  Administrator. 
Microsoft  Certified  Solution  Developer.  Microsoft  Certified  Professional  +  Site 
Building;  Microsoft  Certified  Professional  +  Internet  Microsoft  Certified  Professional. 
PLUS  any  one  of  the  following:  Certified  Novell  Administrator  (CNA)  or  Certified 
Novell  Engineer  (CNE)  or  Master  CNE  or  Certified  Directory  Engineer  or  Certified 
Novell  Instructor  (CNI)  or  Certified  Internet  Professional  (Or). 

Fluency  in  English  is  required;  working  knowledge  of  other  UN  languages  is  desirable. 
Qualified  women  are  encouraged  to  apply. 

The  United  Nations  offers  a  competitive  benefit  package.  (Please  refer  to  our 
homepage,  www.un.org,  for  further  information) 

Deadline  for  applications;  5  December  200 1 
Detailed  curriculum  vitae  including  date  of  birth  and  nationality  should  be 
sent  to:  0I-D-JSP-O02083-E-NY,  Staffing  Support  Section,  Office  of 
Human  Resources  Management,  Room  247 5C,  United  Nations,  New  York, 
NY  10017 

Fax  No:  ( 2 1 2)  963-3 134  or  {212)  963-9560  E-mail  Address: 

Due  to  the  volume  of  applications,  aJI  internal  candidate 
external  candidates  under  serious  consideration  will  be 
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IT  Careers  in  Illinois 


While  information  technology  may  have  first 
boomed  on  the  nation's  two  coastlines,  the  state 
of  Illinois  ranks  as  the  number  3  state  for  size 
of  IT  workforce  for  all  disciplines  of  computer 
science/engineering.  Among  the  reasons  is  the 
range  of  companies  found  in  Illinois  requiring  IT 
expertise,  from  retail  to  consulting  to  financial 
services  to  insurance. 


Lorraine  Baiun,  technical  recruitment  manager  for 
Allstate  Insurance  Company  in  Northbrook,  says, 
"We  want  our  customers  to  be  able  to  reach  us  in 
the  manner  they  want  -  through  our  agents,  our 
call  centers  or  through  our  web  site.  This  speaks  to 
having  a  top-notch  IT  organization  to  help  make 
this  happen." 

Allstate  hires  individuals  with  expertise  in  a  broad 
range  of  technical  areas,  including  legacy  and  client 
server  skills.  "We  want  the  technical  person  who 
is  a  team  player  and  has  the  ability  to  work  with  the 
internal  business  client,"  says  Baiun.  "We  are  a 
family-oriented  company  where  people  have 
opportunity  and  variety  in  their  work,  and  where 
you  can  share  in  the  company's  success." 

Closer  to  the  heart  of  Chicago  is  the  headquarters  for 
Andersen,  formally  known  as  Arthur  Andersen  LLP. 
Andersen  has  worked  to  remain  stable  over  the  past 
year,  continuing  its  focus  on  mid-market  companies 
in  addition  to  expanding  to  larger  clients.  Jim 
O'Malley,  director  of  recruiting  for  Andersen's 
business  consulting  unit,  says  most  of  Andersen's 
customers  worked  over  the  past  five  years  to  make 
themselves  more  nimble  and  able.  When  large-scale 
companies  were  adopting  ERP  in  the  late  1990s,  the 


mid-market  wasn't  so  much  a  target  customer  base. 
"They  didn't  have  the  scale  to  be  a  target  at  that 
time,"  he  says.  "Now  they  are.  And  the  ERP  product 
we  provide  to  them  with  our  partners  has  evolved. 
It's  more  sophisticated,  broader  in  terms  of  its 
modules,  is  web-enabled  and  increasingly  integrated 
with  other  solutions,  such  as  customer  relationship 
management,  sales/marketing  service  and  support." 

Andersen  selectively  hires.  "We  need  individuals 
who  have  technical  solution  skills  in  a  variety  of 
areas  -  applications  development,  software 
engineering,  enterprise  application  integration, 
infrastructure,  wide  area  networks,  voice  over  IP  and 
security,"  explains  O'Malley.  "People  who  meet  our 
high  standard  want  to  work  here.  We  have  a  princi¬ 
pal  -  think  straight,  talk  straight.  It  says  a  lot  about 
our  values.  We  provide  to  our  clients  a  full  scope  of 
disciplines,  but  we  provide  action  that  speaks 
as  one." 


For  more  job  opportunities  with  firms  in  lllinios,  turn  to  the  poges 
of  ITcareers. 

•  If  you'd  like  to  take  port  in  an  upcoming  ITcareers  feature,  contact 
Janis  Crowley,  650.312.0607  or  janis_crowley@itcareers.net. 

•  Produced  by  Carole  R.  Hedden 

•  Designed  by  Aldebaran  Graphic  Solutions 


OPERATIONS  MANAGER 
Townsend  Computer  Technologies 
seeks  an  Operations  Manager  to 
oversee  maintenance  activities 
for  mainframe  and  laser  printing 
equipment;  and  manage  team 
of  field  service  engineers  in 
performing  problem  diagnosis 
and  repair.  Position  requires  a 
Bachelor's  degree  in  Electrical, 
Electronic  or  Mechanical  engi¬ 
neering  or  equivalent  work 
experience,  and  prior  experience 
in  field  service  management 
Candidates  must  also  have 
expertise  in  IBM  mainframe 
equipment  and  peripherals,  and 
production  laser  equipment. 
Send  resume  to: 

Personnel  Townsend  Computer 
Technologies 

318  Manley  Street  Unit  3  West 
Bridgewater,  MA  02379 


Atos  Origin,  Inc.,  is  seeking 
dynamic  professionals  to  join  us 
in  our  offices  in  OH,  NJ  and  CA 
for  the  following  positions;  SAP 
Consultants,  Tibco-Mercator 
Developers/Consultants,  E- 
Commerce  Professionals  -  in¬ 
cluding  Visual  Basic,  Web  Appli¬ 
cations  and  Lotus  Notes,  Supply 
Chain  Management  Consultants 
and  Application  Support  Spe- 
cialists.A  BA/BS  or  equivalent 
work  experience  required.  Trav¬ 
el  to  national  client  sites  is  nec¬ 
essary.  For  consideration,  for¬ 
ward  your  resume,  with  Job 
Code  JHCW1 02201  to  ca¬ 
reers  @  atosorigin.com  or  by  fax 
to  888-551-8223.  EOE. 

ATOS  ORIGIN 


Computer/Info  Systems 

ONE,  Inc.  is  a  national  consulting 
firm  exclusively  focused  on  our 
customers’  deman  chain.  We 
seek  the  following  professionals 
to  join  the  ONE,  Inc.  team: 

•  Software  Engineers 

•  IT  Project  Engineers 

•  Programmer  Analysts 

•  Financial/Management  Analysts 
Consultants  with  in-depth  knowl¬ 
edge  of  one  of  the  following 
technologies:  ATG,  iPlanet, 
Silverstream,  Java,  Java  Script, 
Seibel,  MFC,  ODBC,  Visual 
Basic,  GUI,  Shell  Scripts,  C++, 
Visual  C++,  MS  SQL  Server.  Re¬ 
quires  BSCS/EE  or  MSCS/EE 
and  0-3+  years  experience. 

Our  locations  include:  Austin, 
Dallas,  Houston,  Plano  and  San 
Antonio,  TX;  Chicago,  IL;  San 
Fracisco  and  Los  Angeles,  CA; 
Boston,  MA;  St.  Louis,  MO. 

Applicants  must  have  work 
authorization  to  accept  permanent 
employment  in  the  U.S.  We  offer 
a  competitve  compensation  and 
benefits  package.  Send  cover 
letter,  resume  and  transcripts  to: 
ONE,  Inc.,  Corporate  Headquar¬ 
ters,  2895  Greenspoint  Pkwy., 
#500,  Hoffman  Estates,  IL 
60195.  An  Equal  Opportunity 
Employer. 


divine,  inc.,  computer  software 
applications  developers  and  con¬ 
sultants,  are  seeking  qualified 
applicants  for:  Senior  Consultants, 
Consultants,  Systems  Analysts, 
Software  Developers,  Analysts/ 
Programmers,  Technical  Writers, 
Business  Analysts,  Systems 
Engineers,  Software  Engineers, 
Development  Directors,  Gateway 
Developers  and  Leader  Devel¬ 
opers.  Openings  are  available 
at  the  companies'  offices  in 
Chicago,  III.,  Grand  Rapids,  Mi., 
Indianapolis,  IN.,  Plymouth,  MN„ 
Cincinnati,  OH.,  Independence, 
OH.,  Denver,  CO.,  St.  Louis,  MO., 
Los  Angeles,  CA.,  Irving  TX., 
Fairfield,  CT,  and  Columbus,  OH. 
Interested  applicants  should  for¬ 
ward  their  resumes:  divine,  inc., 
Attn:  DK 1  ;3333  Warrenville  Rd„ 
Lisle,  IL.  60532  or  by  fax  ad¬ 
dressed  to  DK  1  at:  630-799-7508. 
EOE 


♦ 


F71ET2S 

S«rvi+«  Sot#lliii» 

NET2S  is  a  leading  International 
Consulting  and  Engineering  firm 
specializing  in  networking  and 
communications  technologies. 
We  are  presently  seeking  to  fill 
the  following  positions: 

•  Sr.  Unix  Administrator 

•  TIBCO  Engineer 

•  Network  Security  Specialist 

•  Telecom.  Engineer 

•  Sr.  Software  Engineer  / 
Developers 

All  positions  require  BS/MS 
degree  with  a  minimum  of  2  to  3 
years  of  experience  in  the  field. 
Must  possess  excellent  commu¬ 
nication  skills  as  well. 

NET2S,  82  Wall  Street  Suite  400, 
NewYork,  NY  10005;  Fax:  (212) 
279- 1 960;  Phone  (21 2)  279-6565; 
or  Email:  jobus-ny@net2s.com 


ONE,  Inc. 
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here  the  best  get  b 
1-800-762-!! 

The  Job  Seeker's 
Knockout  Punch! 


Platinum  Sponsors 

IDG  Recruitment 
Solutions 
Yahoo!  Careers 

Gold  Sponsor 

Merck 


“The  *1  Diversity  Carter  Fair  In  The  Nation  ” 


Silver  Sponsor 

Verizon  Wireless 


Bronze  Sponsor 

Verizon 


Meet  face-to-face  with  the  area's  hottest  companies  and 
land  a  job  with  more  money,  opportunity  &  challenge! 


2001-2002  UPCOMING  SCHEDULE  OF  EVENTS 

CHICAGO,  IL 

:  ST.L0UIS,  MO 

MIAMI,  FI 

WASHINGTON,  DC 

Tuesday,  Oct.  23 

:  Monday,  Nov.  5 

Tuesday,  Dec  4 

Monday,  Jan.  21 

PHOEHIX,  AZ 

NEW  YORK 

LOS  ANGELES,  CA 

COLUMBIA,  MD 

Monday,  Nov.  5 

:  Tuesday,  Nov.  13 

Monday,  Jan.  21 

Wednesday,  Jan.  23 

CALL  1-800-562-7469  FOR  MORE  INFORMATION  ON  EXHIBITING  OR  ATTENDING! 

Or  check  out  www.naacpcareerfair.com  to  find  out  more  about 
these  events  and  other  career  opportunities. 


The  NAACPDiversity  Career  Fair  is  produced  and  managed  by  Shomex 

2601  Ocean  Park  Boulevard,  Suite  200  •  Santa  Monica,  CA  90405  •  (310)  450-8831 
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A  leading  textile  manufacturer 
seeks  qualified  applicants  for  the 
following  positions  in  Kannapolis, 
NC: 

•  Oracle  Order  Management 
Programmer  Analyst  II,  (must 
have  3  -  5  yrs  of  experience  in 
the  position  offered  or  related 
field,  which  should  include  at 
least  2  yrs  of  experience  in 
Oracle  Applications  develop¬ 
ment  &  maintenance,  knowledge 
or  previous  experience  in  Oracle 
ERP  modules,  Order  Entry/ 
Management  module). 

•  Oracle  Financials  Programmer 
Analyst  II,  (must  have  3  -  5  yrs 
of  experience  in  the  position 
offered  or  related  field,  which 
should  include  at  least  2  yrs 
of  experience  in  Oracle  Appli¬ 
cations  development  &  mainte¬ 
nance,  knowledge  or  previous 
experience  in  Oracle  ERP  mod¬ 
ules,  specific  experience  with 
financial  modules,  including 
GL,  AP,  AR,  FA). 

•  Oracle  Manufacturing  Program¬ 
mer  Analyst  II,  (must  have  3  -  5 
yrs  of  experience  in  the  position 
offered  or  related  field,  which 
should  include  at  least  2  yrs  of 
experience  in  Oracle  Applica¬ 
tions  development  and  mainte¬ 
nance,  Oracle  ERP  modules,  & 
experience  in  Manufacturing 
Module  such  as  WIP,  INV, 
BOM,  ENG  and  MRP/CRP );  & 

•  Oracle  Business  Intelligence 
Technical  Lead,  (must  have  3  - 
5  yrs  of  experience  in  the 
position  offered  or  related  field, 
which  include  at  least  2  yrs  of 
experience  as  an  IT  Mgr). 

Candidates  must  have  a  Bache¬ 
lor's  or  equivalent  in  Computer 
Science,  MIS,  Engineering, 
Business  Adm.  or  related  field  & 
5  yrs  of  relevant  progressive  pro¬ 
fessional  experience  in  the 
above  stated  areas  OR  Master's 
or  equivalent  in  Computer 
Science,  MIS,  Engineering, 
Business  Adm.  &  3  yrs  of  rele¬ 
vant  progressive  professional 
experience  in  the  above  stated 
areas.  Salary  commensurate 
with  experience.  Forward  resume 
to  Don  Mallo,  VP  Fluman 
Resources,  Pillowtex  Corporation, 
One  Lake  Circle  Dr.  Kannapolis, 
NC  28081 . 


Programmers  (Telecom  Consult- 
ing)-Pittsburgh,  PA.  Optical  Net¬ 
working  Software  including-Sonet/ 
SDH,  ADM,  DWDM,  TDM,  Vx 
Works,  TCP/IP,  C,  C++,  Java,  OSI 
andTL-1 .  BS  Computer  Science/ 
Electrical/Comm.  Engg,  with  2 
yrs  exp.  in  job  offered.  Prevailing 
wage  &  benefits.  Multiple  positions. 
Requires  travel  to  client  sites. 
Contact  HR,  Z-Tek  Consulting, 
LLC,  2704  Franklin  Dr.,  Pittsburgh 
PA  15241. 


Software  Engineer  Manager 
(Pittsfield,  W.  Mass  ):  Responsible 
for  planning,  designing,  develop¬ 
ing  and  testing  Programmable 
Logic  Controller  (PLC)  paper 
machine  winder  software  projects 
and  associated  human  machine 
interfaces  (HMI)  utilizing  Visual 
Basic,  C++  and  communication 
protocols.  Will  supervise  and 
manage  other  software  engineers 
in  all  aspects  of  software  project. 
Will  also  serve  as  technical 
advisor  in  updating  and  revising 
software  manuals  for  use  by 
in-house  engineers  at  client 
locations.  Must  have  Bachelor's 
degree,  or  foreign  degree  equiv¬ 
alent,  in  Computer  Science, 
Engineering  or  related  field. 
Must  have  five  years  experience 
in  job  offered  (Software  Engineer 
Manager)  or  five  years  expenence 
in  a  paper  machine  winder 
software  development  position. 
Experience  may  have  been 
gained  concurrently  and  must 
include  (i)  5  yrs  experience  each 
in  PLC  and  HMI  programming: 
and  (ii)  1  yr  experience  each  in 
Visual  Basic,  C++  and  commu¬ 
nication  protocols.  Must  have 
legal  authority  to  work  in  the  U.S. 
Send  resume  to:  GL  &  V  Paper 
Group,  Inc.,  K.  Wetherell  (REF: 
SEM)  1 75  Crystal  Street,  Lenox, 
Mass  01240 


Systems  Project  Coordinator 

Knowledge  Sharing  Systems, 
Inc.,  a  developer  of  internet- 
based  knowledge  networks,  has 
a  need  for  a  Systems  Project 
Coordinator  in  its  Raleigh,  N.C. 
office.  The  Systems  Project 
Coordinator  manages  all  aspects 
of  operational  project  manage¬ 
ment  including  the  following: 
planning,  organizing,  and  over¬ 
seeing  the  analysis  of  computer 
systems  requirements  and 
developing  the  procedures  for 
implementation,  programming 
and/or  maintenance  of  major 
computer  systems  (both  Macin¬ 
tosh  and  Window  platforms). 
Requires:  A  bachelor's  degree  in 
Management  Information  Sys¬ 
tems,  Business  Administration 
or  related  field  and  at  least  one 
year  of  experience  in  systems/ 
software  development  including: 
strong  consulting  experience 
and  communication  skills  to  deal 
with  customers  regarding  project 
development  and  user  support; 
experience  in  staff  supervision, 
task  assignments  and  planning; 
internet  development,  web-page 
design  and  manual  HTML 
programming  using  NetObjects 
Fusion  2.0  or  above,  and  Adobe 
Photoshop  3.0  or  above  for  both 
Macintosh  and  Windows;  web- 
database  connectivity  experience 
with  Macintosh  or  Windows; 
hands-on  experience  in  data¬ 
base  development  for  both 
Macintosh  and  Windows  plat¬ 
forms;  and  web-server  adminis¬ 
tration  with  Microsoft  NT  4.0 
and  IIS  2.0  or  above.  Salary: 
$50,000.00.  Please  send  resume 
to  Kevin  Barquinero,  President, 
Knowledge  Sharing  Systems, 
Inc.,  NCSU-Centennial  Campus, 
940  Main  Campus  Drive,  Suite 
150,  Raleigh,  N.C.  27606, 
kbarquinero  @  knowledgesharing, 
com. 


Tech  Support  Engineer.  Provide 
customer  tech,  support/mainte¬ 
nance;  conduct  planning  sessions. 
Req.  2  yrs.  exp.  in  job  or  as  Tech. 
Analyst/related.  Resume  to  HR, 
Mosaic  Software  800  Fairway 
Dr.,  Ste.  1 98  Deerfield  Beach,  FL 


33441. 


Software  Developer  Develop/ 
design/test/implement  software 
apps.  incl.  Postilion  Nodes  using 
Java,  MS-SQL  server;  dev.  incls. 
using  MAC,  Key  Exchange;  write 
functional  specs.,  user  guide, 
release  notes  and  spec,  sheets. 
Req.  Master's  in  Comp.  Sci.  or 
related  and  1  yr.  exp.  in  job  or  1 
yr.  as  Soft.  Eng.  Resume  to  HR, 
Mosaic  Software  800  Fairway 
Dr.,  Ste.  198,  Deerfield  Beach, 
FL  33441. 


IT  Developer  3,  Wachovia  Corp., 
Philadelphia,  PA.  Assist  in 
design  &  dvlp.  of  Web  programs 
for  internets,  intranet appl.  Build 
object-oriented  components. 
Min.  reqs.  incl.  a  BA  in  Computer 
Science,  Eng.  or  rel.  disc.  &  2 
yrs  exp.  in  the  pos.  offd  or  as  a 
Program  Developer,  Software 
Engineer,  or  Programmer  Analyst. 
The  2  yrs  of  rqd.  exp.  must  have 
incl.  work  w/  developing  web 
appl.  using  JAVA,  Javascript, 
HTML,  servlet  dvlp.  and  XML. 
40hrs/wk,  M-F,  Send  resume 
and  cover  letter  to  Cheryl  Dubon, 
Wachovia  Corporation,  1525 
West  W.  T.  Harris  Blvd.,  NC 
0775,  Charlotte.  NC  28288. 


Revenue  Management  Systems 

-  Senior  Programmer/Analyst  - 
Responsible  for  performing  all 
aspects  of  systems  development, 
concentrating  on  technically 
complex  tasks  which  include 
problem  definition,  system 
analysis  and  design,  program 
development,  testing,  planning 
and  impiementation.  Bachelor's 
degree  in  Computer  Science  or 
related  field  required  and  six 
years'  progressive  complex 
programming  and  development 
experience.  Stated  experience 
must  include  four  years' 
experience  relational  database 
(RDBMS)  processing  techniques; 
four  years'  with  3GL  programming 
language  including  at  least  two 
years'  experience  with  C  and 
C++  on  UNIX  Platforms;  and  one 
year  experience  with  traditional 
rapid  application  development 
techniques. 

Revenue  Management  Systems 

-  Lead  Programmer/Analyst  - 
Responsible  for  directing  an 
applications  development  team 
of  degreed  professionals  in 
systems  development,  which 
includes  problem  definition, 
system  analysis  and  design, 
program  development,  testing, 
implementation  and  full  docu¬ 
mentation.  Master's  degree  in 
Computer  Science  or  related 
field  required.  Experience  must 
include  several  years'  increas¬ 
ingly  complex  programming  and 
system  development  experience 
to  include  analysis,  design  and 
development  of  complex  business 
systems  in  a  UNIX,  C  and  Java 
environment. 

For  consideration,  please  forward 
your  resume  to:  Six  Continents 
Hotels.  Inc.,  Attention:  Ms.  Mary 
Ann  Furniss,  Three  Ravinia 
Drive,  Suite  2900,  Atlanta, 
Georgia  30346.  EOE 


Software  Engineers,  Programmer/ 
Analysts  &  Jr.  Programmer/Ana- 
lysts-Atlanta,  GA  needed  in  A, 
B,  C,  D,  E,  F,  G:  (A):  CICS,  DB2, 
Adabas,  VSAM,  Coboi,  Natural; 
(B):  Rational  Rose,  OMC,  Java, 
Weblogic,  XML,  Oracle,  SQL 
Server;  (C)  Oracle  7.x/8.x,  Peo- 
piesoft,  People  code  and  People 
tools;  (D)  Java,  C,  C++,  Oracle  & 
Weblogic,  (E)  Java  on  AS/400, 
DBUSO,  Surveyor/400,  Sublices, 
HTML,  Javascript  (F)  Mainframe 
Applications  &  EDI  using  RPG 
400,  SQL  400,  AS  400,  Java, 
and  related  internet/web  tools 
(G)  Powerbuilder,  Oracle,  and 
Sybase.  Multiple  positions,  pre¬ 
vailing  wage  and  benefits.  These 
are  consulting  positions  requiring 
travel.  Contact:  HR,  Instcomp, 
Inc.,  4501  Circle  75  Parkway,  Ste 
C-3140  Atlanta,  Georgia  30339. 
EOE. 


♦ 


Sr.  Software  Engineer.  Atlanta, 

GA.  Design,  develop  &  implement 
software  for  new  &  existing 
programs.  Assist  in  the  analysis, 
programming,  testing,  debugging 
&  modification  of  computer  pro¬ 
grams  for  end  user  applications. 
Conduct  testing,  including  both 
unit  &  integration  testing,  of 
software  configurations.  Complete 
documentation  &  procedures  for 
the  installation  &  maintenance  of 
software  and  assist  in  the 
support  of  troubleshooting  & 
testing.  Resolve  programming 
problems.  Req.:  MS  in  Industrial 
Engineering  or  Computer  Sci¬ 
ence  (or  BS  in  one  of  the  stated 
fields  of  education  with  2  yrs. 
progressive  relevant  exp.)  and 
working  knowledge  (gained 
through  academic  coursework 
or  work  exp.)  in  programming 
languages  such  as  C++,  COM, 
and  VB.  40-hrs/wk.  Resume: 
Recruiting,  Velant,  900  Circle  75 
Pkwy.,  Ste.  300,  Atlanta,  GA 
30339 


Software  Engineer  (Cambridge, 
MA)-  you  will  analyze  and  design 
the  enterprise  architecture  for 
online  banking  and  brokerage 
applications.  You  will  implement 
the  core  architecture  with  certain 
technical  framework  and  analyze 
and  measure  the  perfonnance, 
stability,  scalability,  and  correct¬ 
ness  of  the  whole  application. 
Required:  Bachelor's  Degree  in 
Computer  Science  or  Engineering 
or  MIS  or  CIS  or  Science  and 
three  years  of  work  experience 
in  the  job.  40  hours  per  week, 
from  9-5,  salary  commensurate 
w/experience.  Please  send  cover 
letter  and  resume  to  Human 
Resources,  JP  Morgan  Chase 
&  Co.,  Arrakis  Division.  One 
Cambridge  Center.  Cambridge, 
Massachusetts  021 42.  No  phone 
calls,  please.  EOE 


Sr.  Software  Engineer/Project 
Lead  (Charleston,  SC)-  Design/ 
develop/maintain  on-line  real-time 
integrated  computer  systems  for 
flat  roll  steel  production  business 
applications  such  as  order  entry, 
steel  coil  allocations,  metallurgy 
approval,  credit  approval,  plant 
scheduling,  manufacturing 
process  history,  shipping,  claims 
and  invoicing.  Interested  appli¬ 
cants  send  cover  letter  and 
resume  to:  Janet  Gaynor,  JB 
Charles,  1800  Glenarm  Place, 
Suite  1200,  Denver,  CO  80202. 
Reference  job#7224. 


Consulting  Service  Engineer, 
Atlanta,  GA.  Consult  with  clients 
&  potential  clients  concerning 
transportation  resource  needs. 
Design  &  implement  strategies 
for  more  efficient  use  of  client’s 
resources,  using  company's 
transportation  planning  tech¬ 
nologies.  Document  client’s 
transportation  requirements  & 
proposed  solutions.  Apply 
company'sJechnologies  to  enable 
planning  system  integration  with 
existing  ciient  systems,  employing 
client-specific  software  codes  & 
processes.  Req.:  MS  in  Industrial 
Engineering.  Working  knowledge 
(gained  through  academic  course- 
work  exp.)  of  Visual  Basic,  SQL, 
Oracle,  and  Windows  NT.  40 
hrs/wk.  Resume:  Recruiting, 
Velant,  900  Circle  75  Pkwy.,  Ste. 
300,  Atlanta,  GA  30339. 
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Computer  Programmer.  Converts 
data  from  project  specs,  of  prob¬ 
lems/procedures  to  create/modify 
computer  programs:  E-Commerce 
&  POS  field  mgmt.,  software/ 
website/maint.;  Digital-PCS  pro- 
gramming-Network  Voice/Data 
Switching.  Req.  4  yrs.  exp.  Send 
resume  to  The  Cellular  Touch, 
HR-PM,  1165  N.W.  76th  Avenue, 
Miami,  FL  33126. 


Software  Developer  wanted  for 
consulting  &  business  integration 
co.  in  Westbury,  NY.  Dsgn,  eval, 
prgm  &  implmt  VB  s/ware  systems 
&  maintain  SQL  Server  d/base 
mgmt  comp  systems;  Prep  tech¬ 
nical  documentation  &  manuals; 
Reqs  BA  in  Electronic  Engg, 
Comp  Engg  or  closely  related 
field  &  2  yrs  exp  in  job  offd. 
Reply  to  hr@dcs.com,  Darby 
Corporate  Solutions,  Inc,  865 
Merrick  Ave,  Westbury,  NY 
11590. 


♦ 


SAP  HUMAN  RESOURCES 
APPLICATIONS  CONSULTANT, 
8am-5pm,  Research,  develop 
and  design  computer  software 
systems  as  they  relate  to  HR 
management  functions  such  as 
payroll,  benefits  and  time  man¬ 
agement.  Required:  proficiency 
with  SAP  HR  and  SAP  ABAP/4, 
ASAP  Cert.,  B.S.  in  IT  or  related 
field,  or  equiv.  Send  Resume: 
ted.bromberg@cedar.com  An 
Equal  Opportunity  Employer 


F/T  Systems  Analyst  responsible 
for  computer  programming,  sys¬ 
tems  analysis,  design,  coding, 
system  implementation,  mainte¬ 
nance,  program  management, 
and  documentation  other  data 
processing  services  using  SQL, 
C/C++,  Java,  Lotus  Notes/Domino, 
RDMS,  PERL,  and  CGI.  Must 
have  a  BS  in  Computer  Science. 
Must  have  2  yrs  of  exp.  in  the  job 
offered  or  a  position  with  same 
duties.  Salary:  Competitive.  Send 
resume  to:  Bob  Stevenson, 
Job  #SAC-108,  E.C.S.,  Inc., 
8744  Main  Street,  Suite  101, 
Woodstock,  Georgia  30188 


♦ 


SW  Engineers:  Research,  dsgn 
&  devlp  power  SW  sys  w /  Java/ 
J2EE,  EJB/JDBC,  C/C++,  Power 
Tool,  PowerBuilder  (PB),  Undo  & 
Autolisp;  Convert  DB  from  main¬ 
frames  sys  to  Oracle/Sybase 
relational  DB  w /  Pro8C,  PL/SQL, 
Unix  Shell  &  data  loading  utilities; 
Devlp  GUI  w/  J2EE,  EJB,  PB, 
PL/SQL  &  Oracle.  40h/w,  8-5,  BS 
or  foreign  equivalent  in  any  eng'g 
related  field,  1  yr  wk  exp  in  job 
offered  or  in  any  other  SW 
dvlp’ing  position  involving  PB, 
Java  &  Autolisp.  Resume  to  HR 
Office,  Energy  Softworx  Inc. 
12100  Race  Track  Rd,  Tampa, 
FL  33626  /email:  hr@enerqy 
sottworx.com 


DATABASE  ADMINISTRATOR 


sought  by  electronic  billing  co.  In 


San  Antonio,  TX.  Must  have 


Master's  Degree.  Respond  by 


resume  to:  Mr.  W.  Su,  V.P.,  G/Z, 


Billserv,  Inc.,  211  North  Loop 


1 604  East,  Ste  1 00,  San  Antonio, 


TX  78232. 


♦ 


Arima  Computer  (TX)  Corp. 
is  looking  a  Technology 
Transaction  Consultant. 


Please  fax  resumet  to  (713) 
983-0720;  or  mail  to  9600 


West  Gulf  Bank,  Houston, 


Texas  77040,  Attn:  HR 


Manger. 


IT  Consulting  &  Services  Co. 
seeks  Computer  Systems  Analyst- 
SAP  to  work  in  Atlanta,  GA  area 
to  analyze  client  user  require¬ 
ments/procedures/problems  to 
improve  existing  computer  sys¬ 
tems  for  business  process 
applications;  develop/implement/ 
integrate  systems  to  SAP  mod¬ 
ules.  Travel  required  (95%  of 
work  schedule).  2  yrs.  exp.  in-job 
required.  Bachelor’s  Degree  in 
Comp.  Science/Business  Admin. 
Send  resumes  to  H  R.  Dept., 
CCAi,  5800  Landerbrook  Dr., 
Mayfield  Hts.,  OH  44124.  EOE. 
No  calls. 


♦ 


Information  Technology  Officer. 
Will  lead  development  and 
implementation  of  information 
systems,  including  global  projects 
for  operating  systems  standards 
and  migrations  and  validation  of 
computer  controlled  laboratory 
equipment  and  measurement 
systems  to  follow  FDA  standards. 
Minimum:  Bachelor's  degree, 
CIS/  related  field,  and  1  year 
experience  in  job  offered  or  5 
years  experience,  IT/Systems 
Analyst.  Applicants  with  any 
suitable  combination  of  educa¬ 
tion,  training  or  experience  are 
acceptable,  respond  by  sending 
resume  only,  in  duplicate,  to: 
Director  of  HR,  Lonza  Biologies 
Inc.,  101  International  Drive, 
Portsmouth,  NH  03801 


ASSISTANT  NETWORK  AD¬ 
MINISTRATOR  to  under  super¬ 
vision,  design,  implement,  and 
troubleshoot  client/server  solutions 
and  network  connectivity  for 
Windows  server  in  LAN/WAN 
environment;  setup,  configure 
and  maintain  Remote  Access 
Server,  Oracle  and  SQL  Server, 
Cisco  routers  and  switches; 
coordinate  network  security 
measures.  Require:  Bachelor’s 
degree  in  Computer  Science/ 
Information  Systems/Business 
Administration  and  six  months 
experience.  Competitive  salary. 
9  am  to  6  pm,  M-F.  Mail  resume 
to:  Director,  Jastron  Technologies, 
Inc.,  2821  Cole  Court,  Norcross, 
GA  30071. 


Technical  Consultant  sought  by 
company  in  Denver,  CO  special¬ 
izing  in  business  software  solutions 
to  work  in  Denver  &  other  unan¬ 
ticipated  job  sites  in  the  US.  Under 
close  supervision,  engage  in 
moderately  complex  tasks  pro¬ 
viding  technical  implementation 
assistance,  support  &  training 
regarding  business  software 
applications  &  tools  that  run  in  a 
client/server  environment  or  are 
web-enabled, &  which  interface 
with  a  variety  of  relational  database 
management  systems.  Trouble¬ 
shoot  &  resolve  business  process 
&  application  issues  that  arise, 
test  solutions,  &  act  as  liaison 
between  users  &  the  applications 
&  tools  development  groups. 
Requires  Bachelor's  or  foreign 
equivalent  in  business  adminis¬ 
tration;  working  knowledge  of 
business  process  issue  resolu¬ 
tion  &  business  software  imple¬ 
mentation  (working  knowledge 
may  be  gained  through  employ¬ 
ment  experience  or  in  an  acade¬ 
mic  setting).  8am-5pm,  M-F; 
$40,000/yr.  (2  openings)  .Respond 
by  resume  to  James  Shimada, 
Colorado  Department  of  Labor  & 
Employment,  Employment  & 
Training  Division,  Tower  II,  #400, 
1515  Arapahoe,  Denver,  CO 
80202,  &  refer  to  Job  Order 
Number  CO  5006247. 


NETWORK  ADMINISTRATOR 
wanted  by  a  construction  com¬ 
pany  in  Northbrook,  IL.  Must 
have  a  Bachelor’s  Degree  in 
Computer  Science/Engineering 
with  2  yrs.  exp.  in  the  job  offered. 
Respond  to:  President,  5  Star 
Construction,  Inc.,  3100  Dundee 
Road,  #705,  Northbrook,  IL 
60062. 


Software  Engineers.  Plano,  TX. 
Design,  develop,  code,  test  & 
debug  software  apps  using  Java 
(J2EE),  C++,  CORBA  and 
JavaScript.  Req:  BS  in  comp  sci, 
engg,  or  related  tech  field  &  3  yrs 
of  exp  as  programmer  or  analyst. 
$74K.  Resumes  to:  Doug  Hull, 
Viewlocity,  Inc.,  3475  Piedmont 
Road,  Suite  1700,  Atlanta,  GA 
30305 


Database  Analyst  wanted  by 


insurance  co.  in  Houston,  TX. 


Respond  to:  Jerry  Lee,  Senior 


VP,  New  Era  Life  Insurance,  200 


Westlake  Park  Blvd.,  Houston, 


TX  77079. 


Call  your 
ITcareers  Sales 
Representative 
or  Janis  Crowley. 

1-800-762-2977 


Senior  Technical  Training  Analyst 
sought  by  company  in  Denver, 
CO  specializing  in  business  soft¬ 
ware  solutions  to  work  in  Denver 
&  other  unanticipated  job  sites  in 
the  US.  Research  industry  trends 
&  developments,  especially  new 
technologies,  &  act  as  resource 
for  individuals  who  are  creating 
training  curricula  &  programs. 
Research  &  test  middleware 
platforms  &  interoperability  soft¬ 
ware  that  allow  different  software 
applications  to  communicate  & 
share  data.  Design  &  develop 
interoperability  software  proto¬ 
types  &  modules,  &  test  & 
de-bug  these  prototypes  &  mod¬ 
ules.  The  interoperability  soft¬ 
ware  &  middleware  interlace  with 
a  number  of  relational  database 
management  systems.  Use 
Java,  CASE  tools,  GUI  tools, 
C++,  XML,  HTML.&  other  tools 
&  languages  in  the  development 
&  testing  process.  Engage  in 
training  &  project  management 
as  required.  Requires  master's 
or  equivalent  specifically  a  Masters 
degree  in  Computer  Science  or 
related  field  plus  3  yrs.  of  pro¬ 
gressive  software  experience;  or, 
a  Bachelor's  degree  in  Computer 
Science  or  a  related  field  plus 
5  yrs.  of  progressive  software 
experience;  working  knowledge 
of  relational  database  manage¬ 
ment  systems,  C++,  &  XML. 
8am-5pm,  M-F;  $68,000/yr. 
Respond  by  resume  to  James 
Shimada,  Colorado  Department 
of  Labor  &  Employment,  Em¬ 
ployment  &  Training  Division, 
Tower  II, #400,1515  Arapahoe, 
Denver,  CO  80202,  &  refer  to 
Job  Order  Number  CO  5006250. 


Technical  Consultant  sought  by 
company  in  Denver,  CO  special¬ 
izing  in  business  software  solu¬ 
tions  to  work  in  Denver  &  other 
unanticipated  job  sites  in  the  US. 
As  part  of  the  Advanced  Tech¬ 
nologies  Laboratory,  research, 
analyze  &  test  new  software 
products  to  determine  their 
compatibility  with  existing  enter¬ 
prise  resource  planning  (ERP) 
software  products.  Engage  in 
testing  &  benchmarking  activities. 
Make  technical  recommendations 
to  development  groups  regard¬ 
ing  how  standard  ERP  client/ 
server  software  applications 
should  be  modified  &  enhanced 
to  make  them  more  compatible 
with  new  software  products  and 
technologies.  Make  recommen¬ 
dations  as  to  how  source  codes 
should  be  enhanced  &/or  modified 
to  improve  compatibility  with  new 
technologies.  In  addition,  engage 
in  post-sales  implementation  of 
software  applications,  including 
developing  interfaces  between 
new  applications  &  legacy  soft¬ 
ware  systems.  Engage  in  project 
management  as  required.  Re¬ 
quires  Bachelor's  in  computer 
science  or  related  field;  1  year 
exp.  in  developing  or  providing 
technical  support  to  enterprise 
resource  planning  client/server 
applications.  8am-5pm,  M-F; 
$55,000/yr.  (2openings)  Respond 
by  resume  to  James  Shimada, 
Colorado  Department  of  Labor  & 
Employment,  Employment  & 
Training  Division,  Tower  II,  #400, 
1515  Arapahoe,  Denver  CO 
80202  &  refer  to  Job  Order 
Number  C05006244. 


♦ 


Systems  Analyst/Programmer 


Must  have  a  4  yr.  Comp  Science 
Degree  or  equivalent  &  exp  in 
analysis,  design  &  development 
of  customized  software  solutions. 
Background  in  finance,  agricul¬ 
ture,  forestry  or  energy  a  plus. 
Travel  Required.  Contact:  Ria  N„ 
Online  Business  Systems,  8100 
24th  Ave.,  ste  1 30,  Bloomington, 
MN  55425  or  Fax  to  952-814- 
0073. 


BEST  Consulting  seeks  the 
following  for  its  HQ  office  in 
Kirkland,  WA: 

•  S/W  Engr.,  Job#CCL-87 
DESC:  Dsgn,  dev,  impl,  &  test 
RDBMS  &  rel.  multi-tiered  dist. 
progs  &  aps.  util.  SQL,  C++, 
XML/UML,  &  Java  on  multi,  plats, 
incl.  Unix,  Solaris,  &  Win  NT  o/s. 
Dev.  test  tools  for  use  in  unit, 
performance,  &  scalability  tests. 
REQ:  MS  in  Engr.,  CS,  Math,  or 
Phys.  +  2  yrs.  exp.  dsgn,  dev,  & 
impl.  RDBMS  &  rel.  aps.  util. 
SQL,  C++,  &  Java  on  Unix  &  Win 
NT  o/s. 

•  Comp.  Sys.  Analyst,  #CCL-85 
DESC:  Prov.  comp.  sys.  consltng 
to  max.  info.  sys.  efficiency. 
Anlyz  existing  sys.  &  user  reqs. 
Dsgn.,  dev.  &  enhnee  info.  sys. 
incl.  RDBMS  &  var.  web  based 
aps.  util.  SQL,  HTML,  JavaScript, 
Java  applets,  &  Java  based  tech, 
on  Win.  o/s.  REQ:  BS  in  CS, 
Engr.,  Math  or  Phys.  +  1  yr.  exp. 
dsgn.,  dev.  &  impl.  RDBMS  &  rel. 
web  based  aps.  util.  SQL, 
JavaScript,  Java  applets,  &  Java 
based  tech. 

BEST  Consulting  seeks  the 
following  for  its  Sacramento 
office: 

•  Sys.  Analyst,  Job  #CCL-86 
DESC:  Provide  comp.  sys. 
consulting  to  max.  info.  sys. 
efficiency;  Deter,  clients  needs, 
set  sys.  specs.;  Anlyz.,  dsgn.  & 
impl.  RDBMS  &  rel.  apps.  util. 
SQL,  Power  builder,  Java,  & 
script,  langs.  on  Win.  &  UNIX  o/s. 
REQ:  5  yrs.  exp.  anlyz.,  dsgn.  & 
impl.  RDBMS  &  rel.  aps.  util. 
SQL,  Powerbuilder,  &  script, 
langs.  on  Win.  &  UNIX  o/s. 
Prem.  sal.,  plus  bons  &  bens. 
Pis  reply  to  J.  King,  BEST 
Consulting,  1 1 255  Kirkland  Way, 
Kirkland,  WA  98033. 


Sr.  Web  Developer  (Technical 
Consultant)  sought  by  company 
in  Denver,  CO  specializing  in 
business  software  solutions  to 
work  in  Downers  Grave,  IL  & 
other  unanticipated  job  sites  in 
the  US.  At  a  sr.  level,  implement, 
integrate,  &  customize  Web- 
based  software  applications  & 
middleware  that  interface  with  a 
variety  of  relational  database 
management  systems.  Design  & 
develop  interfaces  to  integrate 
existing  software  applications 
with  new  software  applications, 
design  &  develop  enhancements 
&  modifications  for  software 
applications  as  needed.  Trou¬ 
bleshoot  &  resolve  any  problems 
that  arise  during  the  implemen¬ 
tation  process.  Provide  user 
training  &  support  as  required. 
Engage  in  project  management 
&  application  development  as 
required.  Use  a  variety  of  tools  & 
languages  including  Java,  C 
programming,  COM,  DCOM, 
Microsoft  Visual  Studio,  etc. 
Requires  Master's  or  equivalent, 
specifically  a  Master’s  degree  in 
Computer  Science,  Engineering, 
Science,  or  a  related  field,  in¬ 
cluding  Physics.  Or  a  Bachelor's 
degree  in  Computer  Science, 
Engineering,  Science,  or  a  related 
field,  including  Physics,  plus  5 
yrs.  of  software  development 
experience;  working  knowledge 
of  relational  database  manage¬ 
ment  systems,  COM,  &  Visual 
Studio.  8am-5pm,  M-F;  $83,000/ 
yr.  (2  openings).  Respond  by 
resume  to  James  Shimada, 
Colorado  Department  of  Labor  & 
Employment,  Employment  & 
Training  Division,  Tower  II,  #400, 
1515  Arapahoe,  Denver,  CO 
80202,  &  refer  to  Job  Order 
Number  CO  5006286. 


SAIC  seeks  experienced  Software 
Applications  Engineer  with  BS/ 
MS  in  Comp.  Studies,  and  Oracle, 
SQL/PL-SQL,  Java.  C++/Pro'C, 
Windows/UNIX,  OO/RDBMS 
skills.  Resumes  to  H.R.  Admin¬ 
istrator,  5001  Rockside  Rd.,  Ste. 
700,  Crown  Center  II,  Indepen¬ 
dence,  OH  44131  or  on-line  at 
www.saic.com. 


Software  Engineer  sought  by 
company  in  Denver,  CO  special¬ 
izing  in  software  development  to 
work  in  Denver  &  other  unantic¬ 
ipated  job  sites  in  the  US.  Under 
close  supervision,  engage  in 
moderately  complex  tasks  re¬ 
garding  participation  in  all 
aspects  of  the  software  develop¬ 
ment  life  cycle  from  requirement 
gathering  to  design,  implemen¬ 
tation,  testing  &  documentation 
for  a  range  of  products  involving 
technical  illustrations  used  in  the 
manufacturing  industry  for  the 
generation  of  parts  manuals  & 
worksheets  to  assemble  equip¬ 
ment.  Working  primarily  using 
Windows  NT  &  Windows  2000 
workstations,  design  &  develop 
new  software  applications  as 
well  as  enhancements  &  modifi¬ 
cations  for  existing  technologies 
using  Visual  C++,  MFC  (Microsoft 
Foundation  Class  Libraries), 
WIN32,  including  Applications 
Programming  Interface  (API), 
linear  algebra,  object-oriented 
methodologies  &  graphics 
systems  programming.  Focus  on 
designing  &  developing  software 
applications  for  client/server 
databases  &  other  progressive 
technologies  that  can  run  on 
different  platforms  &  incorporate 
different  relational  database 
management  systems.  Work  is 
closely  monitored.  Requires 
Bachelor’s  or  foreign  equivalent 
in  comp,  sci,  elec.  eng.  or  related 
field(incl.  electronics  or  electro- 
physics);working  knowledge  of 
Visual  C++,  linear  algebra,  & 
object-oriented  methodologies 
(working  knowledge  may  be 
gained  through  employment 
experience  or  in  an  academic 
setting).8am-5pm,M-F;  $50,000/ 
yr.Respond  by  resume  to  James 
Shimada,  Colorado  Department 
of  Labor  &  Employment,  Em¬ 
ployment  &  Training  Division, 
Tower  II, #400, 1515  Arapahoe, 
Denver,  CO  80202, &  refer  to  Job 
Order  Number  C05006242. 


Senior  Software  Engineer  sought 
by  company  in  Englewood,  CO 
specializing  in  software  dev.,  sales 
&  services  to  work  in  Pittsburgh, 
PA  &  other  unanticipated  job 
sites  in  the  US.  At  a  senior  level, 
engage  in  full  life-cycle  develop¬ 
ment  of  Geographic  Information 
Systems  software  applications 
that  incorporate  client/server 
architecture  or  are  web-based. 
The  applications  also  incorporate 
relational  database  management 
systems  &  run  on  Unix  or 
Windows  operating  systems. 
Analyze  requirements.  Create 
designs  &  design  documenta¬ 
tion.  Code,  test  &  debug  &  modify 
the  applications.  Customize  the 
applications  in  conjunction  with 
client  systems,  &  implement  the 
applications.  Supervise  jr.  devel¬ 
opers,  serve  as  technical  lead, 
develop  training  materials  &  pro¬ 
vide  training  as  needed.  Utilize 
Java,  Java  Script,  &  Cold  Fusion 
&  proprietary  languages  &  tools 
in  designing  &  developing  the 
software  applications.  Requires 
Master's  or  equivalent.  Specifi¬ 
cally,  it  requires  a  master's  degree 
or  foreign  equivalent  in  computer 
science,  engineering  or  Geo¬ 
graphic  Information  Systems  or 
related  field,  plus  3  yrs.  of  pro¬ 
gressive  experience  in  develop¬ 
ing  Geographic  Systems  software; 
or  a  bachelor's  degree  or  foreign 
equivalent  in  computer  science, 
engineering  or  Geographic  In¬ 
formation  Systems  or  a  related 
field,  plus  5  yrs.  progressive 
experience  in  developing  Geo¬ 
graphic  Systems  software.8am- 
5pm,  M-F;  $80,000/yr.  Respond 
by  resume  to  James  Shimada, 
Colorado  Department  of  Labor 
&  Employment,  Employment  & 
Training  Division,  Tower  II, 
#400,1515  Arapahoe,  Denver, 
CO  80202, &  refer  to  Job  Order 
Number  C05006256. 


CW01 1022WMW  5 


Computerworl d  •  Inf o World  •  Network  World  •  October  22,  2001 


careers.com 


IT  CAREERS 


Senior  Oracle  Database 
Administrator 

ArvinMeritor,  Inc.,  a  top-tier  global 
supplier  of  integrated  automotive 
systems  and  modules,  has  an 
opening  for  a  Senior  Oracle 
Database  Administrator  at  our 
world  headquarters  in  Troy, 
Michigan. 

The  qualified  candidate  will 
be  responsible  for  providing 
advanced,  senior-level  technical 
leadership  and  expertise  in  the 
deployment  and  effective  utiliza¬ 
tion  of  Oracle  database  and 
application  technologies.  Oracle 
Enterprise  Resource  Planning 
software,  and  information  tech¬ 
nology  management  tools.  The 
successful  candidate  must  have 
a  Master's  degree  in  Computer 
Science,  Software  Engineering, 
or  a  related  field  and  three  years 
of  Oracle  database  administra¬ 
tion  experience  or  the  equivalent 
(a  Bachelor's  degree  in  Computer 
Science,  Software  Engineering, 
or  a  related  field  followed  by  five 
years  of  progressive  Oracle 
database  administration  experi¬ 
ence). The  successful  candidate 
must  also  be  an  Oracle  Certified 
Database  Administrator.  Job 
Code  17652A 

ArvinMeritor,  Inc.  offers  an 
excellent  salary  and  benefits 
package,  and  opportunities  for 
growth.  For  immediate  consider¬ 
ation,  please  forward  your 
resume  and  salary  requirements 
to  ArvinMeritor,  Inc.,  Attn:  C.P.; 
fax:  (248)  435-7571 ;  email:  job. 
opportunities@arvinmeritor.com. 
Please  reference  the  job  code; 
no  phone  calls  please.  Arvin 
Meritor,  Inc.  is  an  affirmative 
action/equal  opportunity  employer. 


Programmer  Analyst  -  Oracle 

Specialist  -  Multiple  Openings 

Structured  systems  analysis, 
design,  development,  testing, 
quality  assurance,  implementa¬ 
tion,  integration,  maintenance 
and  support  of  large  volume 
on-line  complex  integrated 
client-server  based  business, 
financial,  banking,  manufactur¬ 
ing  and  other  commercial  appli¬ 
cation  systems  in  a  multi-hard- 
ware/multi-software  environment 
using  centralized  or  distributed 
database  systems  using  Oracle 
Relational  Database  Management 
Systems  (RDBMS)  and  related 
software.  Design  of  large  appli¬ 
cation  systems  and  databases  in 
a  Co-operative  Development 
Environment  (CDE);  and  analysis, 
design  and  development  of 
applications  using  CASE  (Com¬ 
puter  Aided  Software  Engineer¬ 
ing)  tools.  Bachelor's  Degree  (or 
equivalent)  in  Computer  Science- 
Math/Enginee  ring/Science/ 
Business-Commerce  and  1  yr. 
experience  in  job  offered  or 
as  Software  Engineer/Systems 
Analyst  are  required.  Must  have 
appropriate  combination  of  skills 
as  follows:  1  of  A  and  3  of  B,  or  2 
of  A  and  2  of  B.  A)  includes 
Oracle  RDBMS,  Oracle  CASE 
tools  (Designer,  Dictionary,  Gen¬ 
erator),  CDE  2,  Oracle  Financials; 
B)  includes  PRO'C,  SQL'Forms, 
SQL'Reportwriter,  SQL'Plus, 
SQL'Menu,  PL/SQL  High 
mobility  preferred.  40  hrs/week, 
8  am  -  5  pm.  $66,671  -  $78,000 
per  year.  Qualified  applicants 
should  contact  or  send  resume 
to:  Pittsburgh/Allegheny  County 
CareerLink,  ATTN:  JS  Supervisor, 
425  Sixth  Avenue,  Suite  2200, 
Pittsburgh,  PA  15219.  Refer  to 
Job  Order  #WEB  201780. 


Computers/Software  Developers 
CommVault  Systems,  Inc.  seeks 
Software  Developers.  Dev  s/ware 
products  using  C/C++  for  PC/ 
UNIX  platforms.  Req:  Master's 
degree  Comp  Sci,  Eng'g,  Sys 
Eng'g,  or  rel  disc  &  5  yrs  exp  in 
position  offered  or  5  yrs  exp  as  a 
programmer  or  systems  analyst. 
Must  have  exp  with  MS  VC++  6.0. 
Res  to  thoffman@commvault. 
com.  EOE. 


Programmer  Analyst  - 
Legacy  Systems  (AS/4001  - 

Multiple  Openings 

Systems  analysis,  design,  de¬ 
velopment,  testing,  debugging, 
quality  assurance,  integration, 
implementation,  post  implemen¬ 
tation  support  &  conversion  of 
complex  on-line  client-server 
based  accounting,  inventory, 
manufacturing,  finance  &  other 
business  application  systems 
using  Relational  Database  Man¬ 
agement  Systems  (RDBMS), 
Fourth  Generation  Languages 
(4GLs)  and  other  software  utilities 
in  a  multi-hardware/multi-soft¬ 
ware  environment  including  IBM 
mainframes,  mid-range  and  PC 
systems.  B.S.  in  Computer  Sci- 
ence/Math/Engineering/ 
Science/Business  -  Commerce 
(or  equivalent)  and  1  yrs.  experi¬ 
ence  in  job  offered  or  as  a  Soft¬ 
ware  Engineer/Systems  Analyst 
are  required.  Must  have  appro¬ 
priate  combination  of  skills  as 
follows:  3  of  B;  or  2  of  B  and  1  of 
C;  or  1  of  A  and  2  of  B.  A) 
includes  software  packages 
BPCS,  MACPAC,  MAPICS;  B) 
includes  languages  RPG/400, 
CL,  COBOL/400,  SQL/400, 
Query/400,  C;  and  C)  includes 
communication/CASE  Tools 
APPC,  APPN,  SYNON,  AS/SET. 
High  mobility  preferred.  40 
hrs/week,  8  am  -  5  pm.  $66,671 
-  $78,000  per  year.  Qualified 
applicants  should  contact  or 
send  resume  to:  Fayette  County 
Team  PA  CareerLink,  ATTN:  JS 
Supervisor,  32  Iowa  Street, 
Uniontown,  PA  15401-3513. 
Refer  to  Job  Order  #  WEB 
200588. 


ENGINEERING 

The  Enterprise  Customer  Rela¬ 
tionship  Management  R&D  team 
of  Avaya,  Inc.,  based  in  Holmdel, 
NJ,  is  seeking  motivated  software 
developers  to  join  the  team  build¬ 
ing  CUSTOMER  RELATION¬ 
SHIP  MANAGEMENT  (CRM) 
systems. 

Responsibilities  include:  design 
and  implementation  of  computer 
applications  in  C++  and  Visual 
Basic  and  system  programs 
in  the  telecommunications  and 
customer  relationship  manage¬ 
ment  area;  designing  the  system 
logic;  programming  and  imple¬ 
menting  that  logic  into  applica¬ 
tions  using  MSMQ  and  MTS, 
creating  and  accessing  SQL  and 
Oracle  databases;  running  on 
various  hardware  and  operating 
systems;  testing  the  programs 
to  ensure  that  they  meet  the 
requirements  and  specifications; 
and  documenting  the  operating 
of  the  program  for  customer  use. 

Required  Qualifications:  The 
successful  candidate  must  have 
a  BS  in  CS,  EE  or  instrumentation 
engineering;  4  years  of  experi¬ 
ence  as  a  Software  Developer 
working  with  MSMQ,  MTS.  SQL 
and  Oracle;  6  months  of  experi¬ 
ence  working  on  Customer  Re¬ 
lationship  Management  systems; 
and  must  be  a  Certified  Microsoft 
Solutions  Developer.  To  apply, 
please  email  your  resume  to 
Dawn  Peru:  dperu@avaya.com. 
EOE. 


If  you  want  to  work  for  a  fast-paced 
IT  company,  Live  Tech  Solutions 
is  the  company  for  you.  We 
provide  exciting  career  opportu¬ 
nities,  excellent  compensation,  a 
full  benefits  package,  training  in 
advanced  technologies  and  more. 
Positions  available  throughout 
the  U.S. 

CURRENT  OPENINGS:  Com¬ 
puter  Programmer;  Database 
Administrator;  Software  Engineer; 
Systems  Analyst;  Database/ 
ERP  Analyst;  Network  Adminis¬ 
trator;  Programmer  Analyst; 
Consultant;  Data  Modelers; 
Developers;  and  Designers. 
Requires  Bachelor  Degree,  or 
the  Foreign  Equivalent,  or  the 
equivalent  in  education  and 
experience. 

Please  send  resumes  to:  Live 
Tech  Solutions,  Attn.  National 
Recruiting,  2330  Marinship 
Way,  Suite  300,  Sausalito, 
California  94965,  or  Email: 
ITjobs2  @  livetechsolutions.com 


Programmer  Analyst  (Micro/ 

Webt  -  Multiple  Openings 

Structured  systems  analysis, 
design,  development,  testing, 
quality  assurance,  implementa¬ 
tion,  integration,  maintenance 
and  support  of  integrated  client- 
server  based  systems  for  busi¬ 
ness,  financial,  banking,  manu¬ 
facturing  and  other  commercial 
business  application  systems  in 
a  multi-hardware/multi-software 
environment  using  centralized  or 
distributed  relational  database 
management  systems.  4GLs 
(Fourth  Generation  Languages) 
and  other  GUI  (Graphical  User 
Interface)  front-end  tools.  Analysis, 
design  and  development  of 
client-server  applications  using 
object-oriented  methodology. 
Bachelor’s  Degree  (or  equivalent) 
in  Computer  Science-Math/ 
Engineering/Science/Business- 
Commerce  and  1  yr.  experience 
in  job  offered  or  as  Software 
Engineer/Systems  Analyst  are 
required.  Must  have  appropriate 
combination  of  skills  as  follows: 
1  of  A  and  2  of  B;  or  2  of  A  and  1 
of  B;  or  3  of  A.  A  includes  Oracle, 
Sybase,  Informix,  SQL  Server, 
Progress,  Ingres,  Access  and 
Proxy  Server;  and  B  includes 
PowerBuilder,  Visual  Basic,  MS- 
Windows,  Visual  C++,  JAM, 
APT-SQL,  SQL'FORMS,  ESQL/ 
C,  GUPTA  SOL,  Progress  4GL, 
Informix  4GL,  Ingres  4GL,  C, 
Java,  Lotus  Notes,  HTML,  CGI, 
IIS,  ASP,  Front  Page,  Perl  and 
Java  Development  Kit  (JDK); 
High  mobility  preferred.  40 
hrs/week,  8  am  -  5  pm.  $66,671 
-  $78,000  per  year.  Qualified 
applicants  should  contact  or 
send  resume  to  McKeesport/ 
Allegheny  County  CareerLink, 
ATTN:  JS  Supervisor,  345  Fifth 
Avenue,  McKeesport,  PA  15132- 
2600.  Refer  to  Job  Order  #  WEB 
201757. 


Systems  Analyst  to  analyze 
requirements,  procedures  and 
problems  to  automate  processing 
or  improve  exiting  computer 
system.  Well  versed  in  all  phases 
of  software  development  life  cycle, 
able  to  design  and  develop  com¬ 
mercial  applications  using 
object-oriented  GUI  development 
tools.  Should  be  technically 
sound  with  hands  on  experience 
in  building  Client-Server  appli¬ 
cations  and  distributed  applica¬ 
tions  using,  C++,  Visual  Basic, 
Powerbuilder,  RMI,  CORBA, 
XML,  TCP/IP,  JSP,  EJB,  Weblogic, 
Multithreading  and  Oracle  on 
Windows  platforms.  Bachelors 
Degree  in  Computer  Science  or 
Engineering  and  two  years 
experience.  Send  Resume  to 
Datum  Software  5680  Peachtree 
Parkway,  Suite  A,  Norcross,  GA 
30092. 


SOFTWARE  ENGINEER  to 
design,  develop,  implement,  test 
and  maintain  application  software 
for  the  telecommunication  indus¬ 
try  in  a  client  server  environment 
using  object  oriented  GUI  based 
tools,  C,  C++,  Visual  C++,  Visual 
Basic,  Oracle  and  QA  partner 
under  Windows  and  UNIX  operat¬ 
ing  systems;  Plan  and  schedule 
project  development  and  imple¬ 
mentation,  and  manage  resources 
and  time.  Require:  Bachelor’s 
degree  in  Computer  Science/ 
Engineering,  Business  Adminis¬ 
tration,  or  a  closely  related  field 
with  five  years  of  progressively 
responsible  experience  in  the  job 
offered  or  as  a  Programmer/ 
Analyst.  Extensive  travel  on 
assignment  to  various  client 
sites  within  the  U.S.  is  required. 
Competitive  salary  offered.  Send 
resume  to:  Roz  L.  Alford,  Principal. 
ASAP  Staffing  LLC,  3885 
Holcomb  Bridge  Rd.,  Norcross, 
GA  30095;  Attn:  Job  PG. 


Talent  is  the 
fuel  of  the 
new  economy. 

Fill  up  with 
ITcarecrs. 


Oracle  Applications  Sr.  Consultant. 
Duties:  Design,  implement,  inte¬ 
grate,  upgrade  &  set-up  Oracle 
appls.  software  &  client/server  & 
web-based  solutions  using  Oracle 
finan.  software.  Analyze,  design, 
upgrade  &  develop  customization, 
reports,  interfaces  w/prod.  systems 
&  conversions  from  legacy  sys¬ 
tems  using  PeopleSoft  HRMS 
&  Ceridian  Time  &  Attendance. 
Install  &  configure  BrioPortal  for 
employee  corp.  report  distribu¬ 
tion.  Provide  tech.  &  func.  support 
&  database  system  admin,  using 
Oracle  Applications  Database 
Admin.  Requires:  M.S.  in  Comp, 
or  Info.  Sci.,  Eng.  or  related  field 
&  3  yrs.  exp.  in  the  job  offered  or 
3  yrs.  exp.  as  a  Consultant,  Data¬ 
base  Adm.,  Analyst  or  Eng.  Con¬ 
current  exp.  must  incl.  1  yr.  exp. 
designing,  implementing  &  setting¬ 
up  Oracle  applications  &  client/ 
server  solutions  &  1  yr.  exp.  pro¬ 
viding  database  system  admin, 
using  Oracle  Applications  Data¬ 
base  Admin.  EOE.  40  hrs./wk.; 
8:00  a.m.  to  5:00  p.m.  Send 
resume  (no  calls)  to:  Diane 
Tuccito,  AnswerThink,  Inc.,  817 
W.  Peachtree  St„  Ste.  800, 
Atlanta,  GA  30308.  Must  have 
legal  auth.  to  work  in  U.S. 


Programmer  Analyst  (Micro/ 

Webt  -  Multiple  Openings 

Structured  systems  analysis, 
design,  development,  testing, 
quality  assurance,  implementa¬ 
tion,  integration,  maintenance 
and  support  of  integrated  client- 
server  based  systems  for 
business,  financial,  banking, 
manufacturing  and  other  com¬ 
mercial  business  application 
systems  in  a  multi-hardware/ 
multi-software  environment  using 
centralized  or  distributed  rela¬ 
tional  database  management 
systems,  4GLs  (Fourth  Genera¬ 
tion  Languages)  and  other  GUI 
(Graphical  User  Interface)  front- 
end  tools.  Analysis,  design  and 
development  of  client-server  ap¬ 
plications  using  object-oriented 
methodology.  Bachelor's  Degree 
(or  equivalent)  in  Computer 
Science- Math/Engineering/ 
Science/Business-Commerce 
and  1  yr.  experience  in  job  offered 
or  as  Software  Engineer/Sys¬ 
tems  Analyst  are  required.  Must 
have  appropriate  combination  of 
skills  as  follows:  1  of  A  and  2  of 
B;  or  2  of  A  and  1  of  B;  or  3  of 
A.  A  includes  Oracle,  Sybase, 
Informix,  SQL  Server,  Progress, 
Ingres,  Access  and  Proxy  Server; 
and  B  includes  PowerBuilder, 
Visual  Basic,  MS-Windows, 
Visual  C++.  JAM,  APT-SQL, 
SQL'FORMS,  ESQL7C,  GUPTA 
SQL,  Progress  4GL,  Informix 
4GL,  Ingres  4GL,  C,  Java,  Lotus 
Notes.  HTML,  CGI,  IIS,  ASP, 
Front  Page,  Perl  and  Java 
Development  Kit  (JDK);  High 
mobility  preferred.  40  hrs/week, 
8  am  -  5  pm.  $66,671  -  $78,000 
per  year.  Qualified  applicants 
should  contact  or  send  resume 
to  Manager,  Washington  County 
Team  PA  CareerLink,  Millcraft 
Center,  Suite  150LL,  90  West 
Chestnut  Street,  Washington,  PA 
15301-4517.  Refer  to  Job  Order 
#  WEB  201771. 


♦ 


SOFTWARE  ENG  3  Formulate/ 
define  complex  operating  soft¬ 
ware  programming  apples  specs; 
modify/maintain  complex  existing 
apples;  design,  code,  test  & 
implement  programs.  BS  Com¬ 
puter  Sci  or  equiv  +  2  yrs  exp 
in  job  or  Programmer/Analyst. 
Proficient  in  Delphi,  C  &  Object 
Oriented  Programming.  Exp. 
dvlp’ing  systems  w/  low  level 
object  oriented  design  docs. 
$70,574/yr.  Send  resume  to:  C. 
James,  John  H.  Harland  Co, 
2939  Miller  Rd,  Decatur,  GA 
30035. 
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System  Administrator  to  Install, 
configure  and  support  an  orga¬ 
nization's  local  area  network, 
wide  area  network  and  Internet 
system  or  a  segment  of  a  network 
system.  Bach. Degree  in  Inf.  Sys. 
equiv.and  1  year  experience. 
Software  Engineer  to  research 
and  develop  computer  software 
Systems  in  conjunction  with 
hardware  product  development. 
Bach,  degree  in  Eng,  Comp.  Sci 
or  Inf.  Sys.  And  5  years  experience 
or  Mas.  Degree  and  2  years 
exp.  Send  resume  to  ACS 
International  Resources,  Inc.  3 
Innovation  Way,  Suite  120, 
Newark,  DE  19711. 


Systems  Manager  wanted  by  a 
Telecommunications  co.  in  Boston, 
MA.  Must  have  a  Master's  degree 
in  Comp.  Sci.  Comp.  Eng.  Math 
or  related  field  &  3  yrs.  exp.  as 
a  Systems  Admin.  Consultant/ 
Programmer  plus  exp.  with  the 
following:  Syst.  Admin,  for  large 
groups,  Unix  Admin,  utilizing 
FreeBSD  and  /or  Linux,  Web 
Admin,  utilizing  Apache  and 
Microsoft  IIS  and  have  knowl¬ 
edge  of  one  (1 )  or  more  types  of 
scripts.  In  lieu  of  a  Master’s 
degree,  we  will  accept  equiva¬ 
lent  combination  of  education 
and  experience.  Please  fax 
your  resume  to  973-412-3700, 
Net2Phone,  Inc.,  H.R.  Dept.  520 
Broad  Street,  Newark,  New  Jersey 
07102  reference#  ALGGC-801 . 


Systems  Engineer  -  A  world 
leader  of  multimedia  digital 
recording  solutions,  applications 
&  related  professional  services 
for  business  interaction  man¬ 
agement,  is  seeking  a  Systems 
Engineer  who  will  analyze, 
recommend,  plan  &  implement 
installations  of  unique  Call 
Logging  Systems.  Req’d:  Bach¬ 
elor’s  in  CompSci,  Engineering 
or  related  discipline  w/2  yrs  of 
related  exp  in  computer  systems/ 
network  engineering.  Must  have 
a  good  knowledge  of  client/sever 
architecture  &  exp  w/C++,  Visual 
BASIC,  NT  Server/workstations 
&  MS  SQL.  REF  #BM01.  Send 
res.  to:  Vivian  Walker,  NICE 
Systems,  Inc,  200  Plaza  Dr.,  4th 
FI.,  Secaucus,  NJ  07094.  Pis 
indicate  REF#. 


Trusted 


by  more 
hiring 
managers 
than  any 
IT  space 
in  the 
world. 


ENGINEERING  GENERAL 
MANAGER  &  CEO  -  Overall 
management  of  the  company. 
Ensure  the  project  in  confor¬ 
mance  with  technical  contractual 
requirements  &  time  schedules. 
Accept  report  from  all  managers. 
Establish  company  strategic 
goals  &  evaluate  the  managers 
performance.  Must  have  in-depth 
knowledge  of  the  Brazilian  Air 
Transport  System  &experience 
with  AirTraffic  Control  &  Airports 
Projects.  1 0  yrs  exper.or  managing 
of  multidisciplinary  professional 
team  with  responsibility  over 
multi-million  dollar  project. 
PROGRAM  MANAGER:  Manage, 
specify,  develop,  integrate,  install, 
quality  assurance  &  logistic  sup¬ 
port  for  air  traffic  control  &  air 
traffic  management  systems.  7 
yrs  exper.  managing  min.  25 
workers  w/responsibility  over 
multi-million  dollar  revenue.  Ex¬ 
perience  w/  air  traffic  control  & 
flow  management,  image  man¬ 
agement,  command  &  control  & 
simulators  systems,  application 
of  mil-std  procedures. 
ENGINEERING  PROGRAM 
MANAGER  -  Coordinate  multi¬ 
disciplinary  projects,  experience 
in  air  traffic  control,  defense  & 
surveillance  systems,  logistics 
management,  technology  ab¬ 
sorption.  Conduct  business  com¬ 
munications  in  Portuguese  with 
Brazilian  govt,  organiztns  & 
parent  orgniztn  in  Brazil.  7  yrs 
management  experience  min.  1 0 
professionals  with  responsibility 
over  multi-million-dollar  revenue. 
ENGINEERING  EXECUTIVE 
VICE  PRESIDENT  -  Technical, 
financial  &  commercial  mgmt  of 
procurement  &  acquisn  of  ser¬ 
vices  and  goods.  7  yrs  exper. 
managing  min.  30  workers  with 
responsibility  over  multi-million 
dollar  revenue.  Exper.  w/  mgmt 
of  complex  multi-disciplinary 
engineering  projects. 

All  candidates  must  have  B.S. 
in  Engineering  &  fluency  in 
Portuguese.  40  hr/wk.  M-F  9am- 
6pm.  Job  in  Woburn,  MA.  Prevail. 
Wage.  Fax  resume  to  781-937 
94  58. 


NETWORK  SYSTEMS 
ADMINISTRATORS 

needed  for  development, 
implementation  and 
administration  of  network 
workstations,  server 
configurations,  the  UNIX 
and  Windows  NT  operating 
systems,  networking 
protocols,  firewall  and 
Oracle  Database  internals. 
Master’s  required  in  Math, 
Computers,  Engineering  or 
any  other  related  field  of 
study,  plus  3  yrs  exp  or  3 
yrs  as  a  Network  or 
Systems  Administrator. 
Employer  will  accept  5  yrs 
of  related,  progressively 
responsible  post  Bachelor’s 
exp  in  place  of  the  Master’s 
and  3  yrs  mentioned  above. 
Must  have  proof  of  legal 
authority  to  work  in  the  U.S. 

Salary:  $70, 000.00/year  for 
a  40  hour  work  week. 

Interested  applicants  submit 
resume  or  C.V.  to  Phila.  Job 
Bank,  444  N.  3rd  St.,  3rd 
FL,  Phila.,  PA  19123.  Refer 
to  Job  Order  #WEB203474. 
Ad  paid  by  an  Equal 
Opportunity  Employer. 


TO  HIRE. 

(J)  careers  com 

START 
WITH  US. 


Computerworld  • 


Programmer  Analyst  fMicro/ 

Web)  -  Multiple  Openings 

Structured  systems  analysis, 
design,  development,  testing, 
quality  assurance,  implementation, 
integration,  maintenance  and 
support  of  integrated  client-server 
based  systems  for  business, 
financial,  banking,  manufacturing 
and  other  commercial  business 
application  systems  in  a  multi¬ 
hardware/multi-software  envi¬ 
ronment  using  centralized  or 
distributed  relational  database 
management  systems,  4GLs 
(Fourth  Generation  Languages) 
and  other  GUI  (Graphical  User 
Interface)  front-end  tools.  Analysis, 
design  and  development  of 
client-server  applications  using 
object-oriented  methodology. 
Bachelor’s  Degree  (or  equivalent) 
in  Computer  Science-Math/ 
Engineering/Science/Business- 
Commerce  and  1  yr.  experience 
in  job  offered  or  as  Software 
Engineer/Systems  Analyst  are 
required.  Must  have  appropriate 
combination  of  skills  as  follows: 
1  of  A  and  2  of  B;  or  2  of  A  and  1 
of  B;  or  3  of  A.  A  includes 
Oracle,  Sybase,  Informix,  SQL 
Server,  Progress,  Ingres,  Access 
and  Proxy  Server;  and  B  in¬ 
cludes  PowerBuilder,  Visual  Ba¬ 
sic,  MS-Windows,  Visual  C++, 
JAM,  APT-SQL,  SQL'FORMS, 
ESQL/C,  GUPTA  SQL,  Progress 
4GL,  Informix  4GL,  Ingres  4GL, 
C,  Java,  Lotus  Notes,  HTML, 
CGI,  IIS,  ASP,  Front  Page,  Perl 
and  Java  Development  Kit 
(JDK);  High  mobility  preferred. 
40  hrs/week,  8  am  -  5  pm. 
$66,671  -  $78,000  per  year. 
Qualified  applicants  should 
contact  or  send  resume  to  JS 
Supervisor,  Greene  County 
Team  PA  CareerLink,  4  West 
High  Street,  Waynesburg,  PA 
15370-1324.  Refer  to  Job  Order 
#  WEB  201776. 


IT  project  Manager  to  Participate, 
guide  and  assist  in  development 
of  project  development  and 
customization  plans  of  WEB 
enabled  client/server  applications, 
such  as  Oracle  database  to  be 
integrated  in  a  an  ERP/CRM 
environment.  Plan,  direct,  control 
and  report  on  the  projects.  Masters 
Degree  in  Business  Administra¬ 
tion,  Information  Systems  or 
equivalent  and  2  years  of  expe¬ 
rience.  Send  resume  to  Pyramid 
Consulting  Inc.  5335  Triangle 
Parkway,  Suite  510,  Norcross, 
GA  30092. 


Silicon  Valley  Systech,  Inc.  is  hiring 
Programmer  Analysts/DBA  and 
Software  Engineers.  Will  be 
assigned  to  client  sites  nation 
wide.  Please  send  resume  to 
1 590  Oakland  Road,  Suite  B-206, 
San  Jose,  CA  95131.  Tel. No.: 
(408)  441-7677,  Fax:  (408)441- 
7085  or  e-mail  to  sanaeeta® 
sbsonline.com. 


SENIOR  PROGRAMMER/ AN¬ 
ALYST  to  analyze,  design,  develop, 
test  and  implement  application 
software  for  the  mortgage  insur¬ 
ance  industry  in  a  client/server 
environment  using  Object  Onented 
programming,  Visual  Basic,  VJ++, 
Java  Script,  VB  Script,  Java,  ASP, 
COM,  SQL  Server,  MTS,  XML, 
HTML  and  Rational  Rose  under 
DOS  and  Windows  98/2000/NT 
operating  systems.  Require  B.S. 
degree  in  Computer  Science,  an 
Engineering  discipline,  or  a  closely 
related  field  with  two  years  of  ex¬ 
perience  in  the  job  offered.  Com¬ 
petitive  salary  offered.  Apply  by 
resume  to:  Kenneth  J.  Boatman, 
Republic  Mortgage  Insurance 
Corp.,  1900akPlazaBlvd.,  Winston- 
Salem,  NC  27105;  Attn:  Job  SM. 
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IT  Integration/Engineer  1 .  Provide 
basic  engineering  services 
including:  research,  design, 
testing,  and  deployment  of 
technologies  related  to  IT.  Utilize 
Oracle  forms  and  reports.  Partic¬ 
ipate  in  projects  or  programs 
requiring  engineer/systems 
skills.  Participate  in  the  design, 
deployment,  and  implementation 
of  solutions  that  meet  internal  or 
customer  requirements.  Provide 
data  and  research  in  support  of 
the  project  or  sub-component. 
Contribute  solutions  complex 
technical.  Help  to  develop 
new  or  improved  techniques  or 
practices.  Provide  and  maintain 
documentation  about  research 
and  implementation.  Provide 
technical  assistance  for  opera¬ 
tions  areas.  40  Hours  per  week. 
9:00  a.m.  to  5:00  p.m.  Overtime 
not  applicable.  $54,596  per 
year.  Overtime  exempt.  Appli¬ 
cant  must  have  bachelor's 
degree  in  computer  science, 
engineering  or  related  field.  In 
addition,  must  have  one  year  of 
experience  in  the  job  offered 
or  one  year  of  experience  as  a 
Programmer  Analyst.  Qualified 
applicant  must  have  one  year  of 
experience  in  (i)  Oracle  Forms 
development,  including  mainte¬ 
nance  and  support  of  existing 
applications,  as  well  as  new  de¬ 
velopment;  and  (ii)  development 
of  Oracle  Reports.  Must  also 
have  six  months  of  experience  in 
Java  development,  including 
maintenance  and  support  of 
existing  applications  as  well  as 
new  development.  Applicants 
must  show  proof  of  legal  authority 
to  work  in  the  U.S.  Send 
resumes  to  ILLINOIS  DEPART¬ 
MENT  OF  EMPLOYMENT 
SECURITY,  401  South  State 
Street -7  North,  Chicago,  Illinois, 
60605,  Attention:  Joanne 
Breaux,  Reference  #V-IL  29783- 
N.  AN  EMPLOYER  PAID  AD. 
NO  CALLS.  SEND  2  COPIES 
OF  BOTH  RESUME  AND 
COVER  LETTERS. 


PROGRAMMER/ANALYST  to 
analyze,  design,  develop,  test, 
maintain  and  implement  appli¬ 
cation  software  using  COBOL  II, 
DB2,  JCL,  CICS,  TSQ,  IMS-DB/ 
DC,  SPUFI,  CEDF  and  BMS  in  a 
mainframe  environment.  Require: 
Bachelor’s  degree  in  Computer 
Science,  and  Engineering  disci¬ 
pline,  or  a  closely  related  field 
with  two  years  of  experience  in 
the  job  offered  or  as  a  Program¬ 
mer.  Extensive  travel  on  assign¬ 
ment  to  various  client  sites  within 
the  U.S.  is  required.  Competitive 
salary  offered.  Apply  by  resume 
to:  Frank  Beaman,  President, 
Global  Software  Development 
Services,  Inc.,  1 1 1 0  Northchase 
Parkway,  Suite  250,  Marietta, 
GA  30067;  Attn:  Job  VA. 


Downsizing  Systems,  Inc  urgently 
seeks  Project  Analyst  with  min. 
1  yr.  industry  exp  in  MS  Project, 
MS  Frontpage,  MS  Image  Com¬ 
poser,  WinNT,  Win  95,  VAX, 
CAD/CAM,  DSPs,  AutoTester  & 
Unisys  A-series;  must  be  skilled 
in  knowledge  mgmt.  strategic 
planning,  systems  engineering, 
high  level  design  architecture; 
research  business  uses  &  impact 
of  tech.,  etc.Travel  reqd.  Resume 
only  to  HR,  1009  Beverly  Ct., 
Lombard,  IL  60148. 


Computer  Network  Specialist: 

Works  w/WAN  (Wide  Area  Net¬ 
works).  Design  &  control  LAN'S 
(Local  Area  Network).  Set  up  & 
control  networks  between  central 
office  &  locations  out  of  country. 
Design  &  program  software  & 
hardware,  includ.  the  data  base 
warehouse  overaTCP/IP  Protocol. 
Control  security  system  includ. 
network  security  access  in  all 
wind/NT  4.0  servers  &  program¬ 
ming  &  designing  security  ac¬ 
cess  in  all  wind/98  workstations- 
40  hrs  per  wk,  8A-5P,  2  yrs  of 
exp.  in  job  offered.  Fax  resume  to 
(305)593-2391. 


Programmer  Analyst  /Micro/ 

Structured  systems  analysis, 
design,  development,  testing, 
quality  assurance,  implementation, 
integration,  maintenance  and 
support  of  integrated  client-server 
based  systems  for  business, 
financial,  banking,  manufacturing 
and  other  commercial  business 
application  systems  in  a  multi- 
hardware/multi-software 
environment  using  centralized  or 
distributed  relational  database 
management  systems,  4GLs 
(Fourth  Generation  Languages) 
and  other  GUI  (Graphical  User 
Interface)  front-end  tools.  Analy¬ 
sis,  design  and  development  of 
client-server  applications  using 
object-oriented  methodology. 
Bachelor’s  Degree  (or  equivalent) 
in  Computer  Science-Math/ 
Engineering/Science/Business- 
Commerce  and  1  yr.  experience 
in  job  offered  or  as  Software 
Engineer/Systems  Analyst  are 
required.  Must  have  appropriate 
combination  of  skills  as  follows: 
1  of  A  and  2  of  B;  or  2  of  A  and  1 
of  B;  or  3  of  A.  A  includes  Oracle, 
Sybase,  Informix,  SQL  Server, 
Progress,  Ingres,  Access  and 
Proxy  Server;  and  B  includes 
PowerBuilder,  Visual  Basic,  MS- 
Windows.  Visual  C++,  JAM, 
APT-SQL,  SQL'FORMS,  ESQL/ 
C,  GUPTA  SQL,  Progress  4GL, 
Informix  4GL,  Ingres  4GL,  C, 
Java,  Lotus  Notes,  HTML,  CGI, 
IIS,  ASP.  Front  Page,  Perl  and 
Java  Development  Kit  (JDK); 
High  mobility  preferred.  40  hrs/ 
week,  8  am  -  5  pm.  $66,671  - 
$78,000  per  year.  Qualified 
applicants  should  contact  or 
send  resume  to  Manager,  Indiana 
Job  Center,  350  North  Fourth 
Street,  Indiana,  PA  15701-2000. 
Refer  to  Job  Order  #  WEB 
210763. 


Mult  openings  for  programmer/ 
analysts  w/Bach.  1st  pos  req’s  2 
yrs  exp  in  prgms  for  mgmt  app’s, 
creating  online  reports,  quality 
assurance  &  using  INFORMIX 
4GL,  INFORMIX-Online  Data¬ 
base,  Unix  &  TCP/IP.  2nd  pos 
req's  1  yr  exp  installing,  main¬ 
taining  &  supporting  comp 
networks,  using  WinNT,  Win 
2000  &  Linux.  May  req  reloca¬ 
tion.  Send  resume  to  Alpac,  Inc., 
403  Harbor  Way,  Ann  Arbor,  Ml 
48103. 


COMPUTER  PROGRAMMERS 
&  SOFTWARE  ENGINEERS 
United  Software  Associates,  Inc. 
is  hiring  all  levels  of  Computer 
Programmers  and  Software 
Engineers.  Travel  required 
and  will  be  assigned  to  client 
sites  nationwide.  Resumes 
to  231  Old  Bernal  Avenue, 
Suite  8,  Pleasanton,  CA 
94566.  Tel:  (925)249-0230,  Fax: 
(925)249-0232  or  email  to 
sbhat@usain.com 


Software  Engineer:  Design  & 
develop  software  financial  solu¬ 
tions  &  modifications  (SAP  R/3 
configuration,  installation,  imple¬ 
mentation,  integration  &  cycle 
system  testing)  using  SAP  to 
perform  systems  analysis  of  end 
user’s  financial  &  related  business 
requirements.  Must  Have:  Asso¬ 
ciates  in  Business  or  Finance,  5 
yrs  exp  in  SAP  financial  software 
development.  F/T,  M-F.  Resume 
to:  McCannon.  Risedorf  &  Ingalls, 
300  West  Main  St,  Northboro, 
MA  01532 
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Airline  Security  Through  IT 

The  DOT’S  Rapid  Response  Team  on  Airport  Security  made  the 
following  recommendations: 

►  Establish  airport  passenger  screening  under  the  direct  control  of  a  new 
federal  law  enforcement  agency  within  the  DOT. 

►Share  law  enforcement  and  intelligence  information  with  those  responsible 
I  for  aviation  security.  H 

►  Deploy  new  technologies  more  widely  to  augment  the  aviation  security 
program. 

►  Strengthen  airport  passenger  screening  and  other  security  procedures. 

►  Establish  a  nationwide  program  of  voluntary  prescreening  of  passengers, 
together  with  the  issuance  of  “smart”  credentials. 

The  Rapid  Response  Team  report  is  available  at: 

www.dot.gov/affairs/airportsec.htm 


Continued  from  pagel 

Air  Security 

lying  all  in-house  reservation 
systems  as  well  as  the  global 
distribution  systems  (GDS), 
like  Sabre  Holdings  Corp.  in 
Fort  Worth,  Texas. 

The  GDSes  give  travel 
agents  and  Internet  sites  a  sin¬ 
gle  point  of  contact  to  search 
for  airfares.  Many  airlines  also 
outsource  their  reservation 
systems  to  GDSes. 

Sabre  has  begun  a  process  to 
move  its  reservation  system  off 
TPF  and  onto  Himalaya  Non- 
Stop  servers  from  Compaq 
Computer  Corp.  But  that  proc¬ 
ess  is  expected  to  take  four 
years. 

Even  implementing  these  se¬ 
curity  measures  as  an  interme¬ 
diate  step  toward  a  complete 
overhaul  would  be  a  long  and 
costly  undertaking. 

“Whenever  you  make  even 
the  smallest  changes  in  Sabre 
or  any  TPF  environment,  it 
takes  an  unbelievably  long 
time  to  do  it  —  time  and  re¬ 
sources,”  said  Tom  Cook,  for- 


According  to  Richard  Eastman, 
president  of  The  Eastman  Group, 
the  technology  problem  faced  by 
the  airlines  has  to  do  with  the 
nature  of  IBM’s  TPF  operating 
system. 

TPF  stores  data  in  isolated 
“silos"  that  can  be  accessed  only 
by  using  commands  from  a  cen¬ 
tralized  processor  in  the  system 
that  constantly  polls  for  data.  So 
for  a  ticket  agent’s  terminal  or  an 
airline  maintenance  application  to 
send  or  retrieve  information,  it 
has  to  wait  for  the  central  system 
to  poll  it.  Requests  for  flight  reser¬ 
vation  information  have  higher 
priority  than  other  requests,  so 
even  though  TPF  is  constantly 
polling  for  messages,  the  millions 
of  Internet  users  who  visit  online 
booking  sites  tend  to  strain  the 
ability  of  TPF  to  handle  other 


mer  president  of  Sabre  Tech¬ 
nology  Solutions.  That  compa¬ 
ny  became  Sabre  Holdings  in 
1999,  when  Fort  Worth-based 
AMR  Corp.,  the  parent  compa¬ 
ny  of  American  Airlines,  di¬ 
vested  itself  of  its  interest  in 
Sabre.  Cook  now  heads  Re¬ 
plane  Inc.  in  Chicago. 

“The  code  is  old  and  struc¬ 
tured,”  Cook  said.  “Making 
changes  in  the  TPF  environ¬ 
ment  is  orders  of  magnitude 


data,  Eastman  said.  Operations 
data,  including  takeoff  informa¬ 
tion,  is  therefore  already  held  up. 
The  concern  now  is  that  the  addi¬ 
tion  of  requests  for  security  infor¬ 
mation  will  cause  severe  lags  in 
system  performance. 

“The  security  piece  will  cause 
a  performance  issue,”  agreed  Jim 
Peters,  president  and  chief  tech¬ 
nology  officer  at  Datalex  Inc.  in 
Dublin.  Datalex  has  been  in  the 
online  travel  business  for  15  years 
and  offers  tour  reservation  sys¬ 
tems,  pricing  engines  and  indus¬ 
try  analysis,  as  well  as  a  booking 
engine  that’s  used  by  American 
Airlines,  Delta  and  Amtrak. 

Peters  said  his  company  is 
now  working  with  the  airlines, 
governments,  online  travel  sites 
and  other  travel-related  compa¬ 
nies  to  translate  some  customer 


more  difficult  than  it  is  in  a 
modern  environment.” 

Even  the  company  that  de¬ 
veloped  the  reservation  sys¬ 
tems  in  the  late  1950s  and  early 
1960s  acknowledges  that  secu¬ 
rity  queries  are  going  to  cause 
performance  problems. 

“That  could  be  true,”  said 
Michael  Hulley,  vice  president 
of  the  Global  Travel  and  Trans¬ 
portation  Industry  unit  at  IBM, 
referring  to  the  possibility  of 


information  into  XML  data  and 
perform  the  queries  outside  of  the 
mainframe-based  system. 

However,  because  the  FBI 
uses  a  pixel-based,  relational 
database  while  the  airlines  use 
character-based,  structured  data¬ 
bases,  the  FBI  must  vet  each 
name  for  the  airlines’  systems.  So 
when  the  airlines  check  a  passen¬ 
ger’s  name  against  a  database  of 
suspected  terrorists,  the  name  is 
already  defined  in  a  language  the 
airlines’  databases  can  under¬ 
stand,  Eastman  said.  When  trying 
to  share  information  in  real  time, 
that  creates  a  problem,  he  said. 

Eastman  and  Peters  agree  that 
add-ons  can  be  a  temporary  solu¬ 
tion  to  the  security  problem. 

“They  will  build  an  interim  solu¬ 
tion,”  Eastman  said,  “and  the 
government  will  then  say,  ‘You’ve 
got  x  period  of  time  to  give  us  a 
better  system.’  ’’ 

-  Jennifer  DiSabatino 


performance  problems.  “The 
reservation  system  is  meant 
for  doing  mostly  one  thing: 
acting  at  a  very  secure  high 
speed  with  high  availability.  It 
is  not  looking  for  triggers,”  like 
a  terrorist’s  name  in  the  pas¬ 
senger  list  for  a  flight,  he  said. 

To  screen  passenger  names, 
the  airlines  could  add  another 
processing  unit  to  run  checks 
without  sending  the  name 
through  TPF,  said  Hulley.  The 
reservation  system  could  send 
passenger  names  to  the  old 
system,  as  well  as  to  the  new 
unit,  working  around  the  old 
TPF’s  inability  to  do  queries. 
Programs  that  scan  passenger 
profiles,  not  just  names,  could 
run  in  the  second  processor, 
Hulley  said. 

He  said  other  types  of  secu¬ 
rity  could  also  be  run  in  tan¬ 
dem  with  TPF.  “I  would  think 
that  adding  biometric  capacity 
to  that  database,  that  would  be 
done  externally,”  Hulley  said. 

No  Recognition 

The  problem  with  that,  said 
Eastman,  is  that  the  govern¬ 
ment  and  the  airline  industry 
don’t  recognize  the  differences 
in  each  other’s  systems.  They 
just  think  they  can  write  some 
code  and  make  it  work,  he  said. 

“They  don’t  know  what 
they’re  doing  yet,”  he  said. 

However,  Hulley  noted,  be¬ 
fore  the  technological  prob¬ 
lems  can  be  solved,  the  airlines 
and  various  local,  state,  federal 
and  even  international  govern¬ 
ment  agencies  must  first  re¬ 
solve  the  privacy  and  owner¬ 
ship  issues  associated  with 
uniform  information  sharing. 

The  Federal  Aviation  Ad¬ 
ministration  (FAA),  which  is 
under  the  DOT’S  authority,  de¬ 
clined  to  comment  on  when  or 
even  whether  the  new  security 
guidelines  will  be  imposed. 

“We  want  to  get  this  stuff  go¬ 
ing  as  soon  as  possible,”  said 
FAA  spokesman  Paul  Take- 
moto.  When  asked  if  the  gov¬ 
ernment  would  help  fund  the 
implementation  of  computer- 
based  screening,  he  said,  “That 
all  has  to  be  worked  out.”  > 


Hotels  Having 
Problems,  Too 

Hotel  chains  may  find  it  feasi¬ 
ble  to  do  the  kind  of  security 
screening  the  FAA  is  consider¬ 
ing  for  the  airlines,  but  inde¬ 
pendent  or  franchise  hotels  not 
linked  to  a  central  system 
might  find  it  difficult  to  manage 
guest  profiles. 

"Hotel  chains  are  far  more 
capable  of  doing  [security 
screening],"  said  Jane  Kar- 
woski,  CEO  of  All-Hotels  Ltd.  in 
Edinburgh.  “When  you  get 
down  to  individual  hotels,  it  is 
far  more  difficult."  Franchises 
are  also  a  problem,  because 
they  have  no  central  system, 
she  said. 

Hilton  Hotels  Corp.  is  in  a 
position  to  perform  security 
screening  on  the  strength  of  its 
customer  relationship  manage¬ 
ment  (CRM)  system. 

Tim  Harvey,  CIO  at  Hilton, 
said  the  Beverly  Hills,  Calif.- 
based  company  has  received 
several  isolated  requests  from 
the  FBI  to  provide  information 
on  guests  following  the  terrorist 
attacks. 

“We  anticipate  that  at  some 
point  in  time,  somebody's  go¬ 
ing  to  come  to  us  and  say,  'Can 
you  do  a  greater  level  of  scruti¬ 
ny?’  I  suspect  there's  going  to 
end  up  being  names  of  people 
that  you  want  to  know  -  names, 
aliases,  addresses,"  Harvey 
said.  “Since  we  use  profiles  for 
reservation  booking  anyway, 
you  could  create  a  series  of 
profiles  that  end  up  getting  red- 
flagged.  That  technology  exists 
today.  It  would  be  just  a  matter 
of  incorporating  the  profiles.” 

Hilton  owns  several  hotel 
chains,  including  Hilton,  Hamp¬ 
ton  Inn,  Doubletree  and  Em¬ 
bassy  Suites  Hotels,  as  well  as 
landmarks  such  as  New  York’s 
Waldorf-Astoria  and  Chicago's 
Palmer  House.  All  have  been 
connected  to  the  Hilton  CRM 
system  since  spring  2000. 

The  only  real  obstacle  would 
be  privacy-related  issues,  Har¬ 
vey  said. 

-  Jennifer  DiSabatino 


The  Technology  Behind  the  Problem 


Periodical  postage  paid  at  Framingham.  Mass.,  and  other  mailing  offices.  Posted  under  Canadian  International  Publication  agreement  *0385697.  CANADIAN  POSTMASTER:  Please  return  undeliverable  copy  to  PO  Box  1632.  Windsor.  Ontario  N9A  7C9.  Computerworld  (ISSN  0010-4841)  is  published 
weekly:  except  a  single  combined  Issue  for  the  last  two  weeks  in  December  by  Computerworld.  Inc.,  500  Old  Connecticut  Path.  Box  9171.  Framingham.  Mass.  01701-9171.  Copyright  2001  by  Computerworld  Inc.  All  rights  reserved.  Computerworld  can  be  purchased  on  microfilm  and  microfiche  through  Uni¬ 
versity  Microfilms  Inc..  300  N.  Zeeb  Road.  Ann  Arbor.  Mich.  48106.  Computerworld  is  indexed.  Back  issues,  if  available,  may  be  purchased  from  the  circulation  department.  Photocopy  rights:  permission  to  photocopy  for  Internal  or  personal  use  is  granted  by  Computerworld  Inc.  for  libraries  and  other  users 
registered  with  the  Copyright  Clearance  Center  (CCC).  provided  that  the  base  fee  of  $3  per  copy  of  the  article,  plus  50  cents  per  page,  is  paid  directly  to  Copyright  Clearance  Center.  27  Congress  St..  Salem.  Mass.  01970  Reprints  (minimum  100  copies)  and 
permission  to  reprint  may  be  purchased  from  Ray  Trynovich.  Computerworld  Reprints,  c/o  Reprint  Management  Services.  Greenfield  Corporate  Center.  1811  Olde  Homestead  Lane.  Lancaster,  Pa.,  17601.  (717)  399-1900,  Ext  124  Fax:  (717)  399-8900  Web 
site:  www.rmsreprints.com.  E-mail:  rtry@rmsreprlnts.com.  Requests  for  missing  issues  will  be  honored  only  if  received  within  60  days  of  issue  date.  Subscription  rates:‘$5  per  copy:  U.S.  -  S68  per  year:  Canada  -  S110  per  year;  Central  &  So.  America.  S250  per 
year;  Europe  -  $295  per  year;  all  other  countries  -  $295  per  year.  Subscriptions  call  toll-free  (800)  552-4431.  POSTMASTER:  Send  Form  3579  (Change  of  Address)  to  Computerworld.  PO  Box  512.  Mount  Morns.  Ill  61054-0512 


lputerworld  Inc.  for  libraries  and  other  users 

bpa  abm  ^ 


THE  BACK  PAGE 


COMPUTERWORLD  October  22, 2001 


FRANK  HAYES/FRANKLY  SPEAKING 


Assembly  Required? 


Buy  a  refrigerator  or  a  dishwasher,  and  for  a 
small  extra  charge,  it  will  be  delivered,  unpacked,  in¬ 
stalled  and  made  ready  to  use.  Buy  a  new  car,  and  the 
seller  will  tack  on  a  “dealer  prep”  fee  that  pays  for 
putting  gas  in  the  tank  and  oil  in  the  crankcase  and  gen¬ 
erally  making  sure  it’s  ready  to  drive  off  the  lot. 

So  why  did  it  take  until  last  week  for  Sun  Microsystems  to  realize 
that  “some  assembly  required”  makes  no  more  sense  for  servers  and 
storage  than  it  does  for  a  kid’s  bicycle  on  Christmas  morning? 

Blame  that  old  “do  it  yourself”  IT  spirit. 


The  idea  behind  the  “Floor  Tile  Ready”  pro¬ 
gram  the  company  announced  last  week  is  that 
if  Sun  wires  together  a  complete  system  at  the 
factory,  there  will  be  fewer  technical  problems 
than  if  IT  shop  people  put  the  system  together 
themselves.  Sun  claims  that  among  its  Floor- 
Tile-Ready  beta  customers,  “early  life  deploy¬ 
ment  issues”  dropped  from  2.5%  to  0.5%  of 
sites.  Sun  also  claims  installation  time  can  drop 
from  10  days  to  one. 

Are  those  numbers  solid?  Maybe,  maybe  not. 
But  it  makes  sense  that  getting  a  vendor  to  inte¬ 
grate  and  test  a  system  at  the  factory  should 
mean  installations  take  less  time  and  have  fewer 
problems  than  they  once  did.  If  the  numbers 
prove  out  —  and  if  the  preintegrated  systems 
are  pretty  close  to  what  a  particular  IT  shop 
needs  —  this  could  be  a  very  good  idea. 

But  will  we  seriously  consider  it?  Unfortu¬ 
nately,  mostly  we  won’t.  And  we  won’t  pass  it 
up  because  of  the  cost,  or  the  vendor  involved, 
or  limited  choices  that  will  be  available  in  a  pro¬ 
gram  like  this. 

We’ll  ignore  it  because  we  want  to  do  it  our¬ 
selves. 

We’ve  mostly  given  up  that  approach  when  it 
comes  to  software.  These  days,  we 
buy  it  off  the  shelf  whenever  possi¬ 
ble  —  everything  from  PC  desktop 
applications  to  IT  shop  tools.  We’ve 
even  replaced  the  old  self-built 
Cobol  systems  that  have  run  the 
business  for  decades  with  ERP 
packages. 

And  we  don’t  diddle  with  the 
code  in  those  canned  applications. 

It’s  trouble  enough  configuring  the 
software  as  it  is,  and  there’s  plenty 
of  real  work  for  our  coders  to  do. 

But  hardware  is,  well,  different. 

We  want  to  wire  it  together  our¬ 


selves.  We  make  up  lots  of  excuses  to  justify 
that  —  we  don’t  trust  the  vendor’s  quality  con¬ 
trol,  we  want  to  know  exactly  how  everything 
goes  together,  we  believe  it’s  a  good  learning 
experience  for  the  shop  —  but  that’s  mostly 
baloney. 

A  new  server  smells  new.  It  feels  new.  The 
connectors  gleam,  untouched  by  cables.  The 
disks  spin  up  clean,  untouched  by  user  pass¬ 
words.  That’s  the  real  reason  we  want  to  do  this 
ourselves  —  it’s  like  Christmas  morning,  fresh 
out  of  the  box,  and  for  a  few  days,  we’re  once 
again  kids  with  a  new  toy. 

It’s  a  great  feeling. 

But  we  can’t  afford  it. 

Really,  we  can’t.  Just  like  we  can’t  afford  the 
luxury  of  rewriting  the  code  for  our  ERP  sys¬ 
tems.  Just  like  we  can’t  afford  a  two-year 
pipeline  for  new  applications. 

We  can’t  afford  to  lose  two  weeks  of  staff 
time  on  other  projects  while  we  install  a  server 
ourselves.  We  can’t  afford  the  risk  that  we’ll  do 
something  wrong  and  then  have  to  call  in  an 
outside  service  organization  to  straighten  it  out. 
We  can’t  afford  to  chew  up  all  that  time  at  the 
beginning  of  a  server’s  life  —  when  that  server 
should  be  doing  something  useful 
for  the  business. 

So  run  the  numbers.  See  if  it 
makes  sense.  If  Sun’s  not  your  ven¬ 
dor  of  choice,  push  your  preferred 
vendor  to  come  up  with  a  ready-to- 
use  program  of  its  own  (HP  has 
something  similar,  but  not  aimed  at 
IT  shops). 

And  if  you  really  can’t  live  with¬ 
out  scratching  that  do-it-yourself 
itch,  go  buy  a  bicycle  —  the  kind 
that  comes  in  hundreds  of  pieces. 

After  all,  there  are  only  64  more 
shopping  days  until  Christmas.  > 


frank  hayes,  Computerworld's 
senior  news  columnist,  has 
covered  IT  for  more  than 
20  years.  Contact  him  at 

frank_hayes@computerworld.com. 


COMPANY  IS  temporarily  with¬ 
out  an  IT  director,  so  senior  tech 
pilot  fish  asks  his  boss,  “What’s 
the  three-to-five-year  plan  for  the 
IT  department?”  Boss  shrugs, 
“You  read  all  those  periodicals. 
Whatever’s  in  them,  that’s  what 
we’re  doing.” 

AFTER  THREE  INCORRECT 

log-in  attempts,  this  system  au¬ 
tomatically  locks  users  out  for 
20  minutes  as  a  security  mea¬ 
sure.  But  users  balk  at  waiting  so 
long  before  they  can  try  again. 

So  help  desk  pilot  fish  finds  a 
new  way  to  explain  it:  “I  can  un¬ 
lock  it,  but  it’s  going  to  take  me 
20  minutes.  Go  get  some  coffee 
while  I  work  on  it."  Fish  notes, 
“For  some  reason,  they’re  happi¬ 
er  with  that.” 

TECH  SUPPORT  pilot  fish 
walks  new  network  admin 
through  the  basic  installation 
procedure  for  a  software  pack¬ 
age.  Don’t  forget  to  mark  these 
four  files  in  the  program’s  direc¬ 
tory  as  read-only  when  you’re 


done,  fish  says.  After  a  pause, 
trainee  asks,  “I  mark  those  files 
after  I  install  the  software,  right?" 

NEW  DBA  pilot  fish  discovers 
that  backups  of  a  mission-critical 
production  database  have  never 
been  tested.  Testing  on  a  pro¬ 
duction  server  is  verboten.  But 
when  applications  group  boss 
sees  the  $30,000  price  tag  for  a 
test  bed  system,  he  balks  and 
asks,  “Can’t  we  just  hope  they’ll 
work?" 

CIO  ASKS  IT  pilot  fish  to  copy 
his  700KB  PowerPoint  presenta¬ 
tion  onto  a  CD.  That’s  so  small, 
it'll  easily  fit  on  a  floppy,  fish 
points  out.  No  good,  says  CIO. 

“A  CD  is  more  appropriate  for 
demonstration  purposes  to  high¬ 
light  our  use  of  technology." 

Highlight  your  tale:  sharky® 
computerworld.com.  You  get 

a  sharp  Shark  shirt  if  your  true 
tale  of  IT  life  sees  print  -  or  if  it 
shows  up  in  the  daily  feed  at 
computerworld.  com/sharky. 


The  5th  Wave 


“For  30  yeavs  X've  pvt  a  hat  and.  coat 
on  to  -make  sales  calls  and  I’m  not 
changing  novj  ^ust  because  I'm  doing 
it  on  the  Web  From  mg  living  voom." 


©Rich  Tennant,  www.the5thwave.com 
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BANDWIDTH  ATYOUR  FINGERTIPS 


Yipes,  the  defining  provider  of  optical  IP  services,  will  change  the  way  you  look  at  bandwidth. 
Our  gigabit  IP-over-fiber  network  lets  you  choose  the  bandwidth  that’s  just  right  for  your  business. 
With  up  to  1  Gbps  in  1  Mbps  increments,  you  get  the  power  you  need,  right  when  you  need  it. 

§  I 

And  since  the  Yipes  network  is  IP  and  Ethernet  throughout,  you  won’t  need  any  new  equipment 
to  tap  into  its  robust  bandwidth.  Scalable,  secure  and  super  fast.  That’s  the  Yipes  ;|fetwork. 

Want  to  turn  on  the  power?  Check  out  www.yipes.com  or  call  877-7|0-6600. 


yipes 

J  "  that's  fast! 


Optical  IP  Networks 


©  2001  Yipes  Communications,  Inc.  All  rights  reserved.  Yipes.  theYipes  logo  and  Yipes  that's  fast!  are  service  diaries  of  Yipes  Communications.  Inc.  All  others  are  properties  of  their  respective  holders 


Oracle  Database  Clusters 

Unbreakable 


Can't  break  it 


Won't  go  down  if  your  server  fails. 
Won't  go  down  if  your  site  fails. 


Can't  break  in 


14  International  security  certifications. 

IBM  DB2  has  none.  Even  MS  SQL  Server  has  one. 
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